Extracted

• • Target

    file.exe

  • Size

    444KB

  • MD5

    ab5812027899dce080507f3dba2c9589

  • SHA1

    ee5b661243f4932d2e56c5c2e359259306b46f18

  • SHA256

    d7a50adf0a325143997529545a82e03451042578a6e09a5b514a90a25ea0aa35

  • SHA512

    07cb4b9eb71166fb83a34ec98afa1af922b31cf9c7edaa00ca7036580c8117cf122e6fe6dac4128408f1908040f1b34277d7a427656cf97a3bfca5a481f15a1c

  • SSDEEP

    12288:485qx2nHZJGTVMshuTBaOr4m36hKbEvZTbo:4SiwTS7M48RbEvlb

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2