Extracted

• • Target
    file.exe
  • Size 444KB
  • SHA256 a83f228e0f3a901c72908f0e7bca9e53c0bda16a9b8c76217235cf1292ca2bee
  • MD5 2f88cd4a15649e240960956640c86686
  • SHA1 334df872cea14a6cf9bc2db20bd4aea38f521c4d
  • SHA512 8e1f7465e87b4701c304341cc26b4604aa879e2e467ad53abb17d4af7a01ecaf074aca744e2a9fde6b89d9856fbc65ee18c6ccfb71c9df19d40ae4626f162133
  • SSDEEP 12288:khjsIRvoqLU9ZM77IIKy0gMxbIeHYB/LXVQbuo:kthRvfLuydh0RxE4Lbu
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2