Extracted

• • Target
    file.exe
  • Size 432KB
  • SHA256 ff0e7db36ba385a2764dede6fd315a7dacba671107995ee78e73711103b9416e
  • MD5 31427c9041c231aef972d6f231b265da
  • SHA1 a00166bbc8b6214633c60e7127bf37f3b8781b14
  • SHA512 1294746176e07b2fce7bae6ae395d61ac99a597e2ddd4336cf3eb97073b4b246d8ac751a17992485bc1445a18036891b39463786bfc45668f6489adb7e4ec66c
  • SSDEEP 6144:RmLRyAQ3E2YgVyRRadz3ud7yrDK9CAveuGlRP8p4pf+U0BJ:RmdyA79gAJ7yr+9f3GlNf+US
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2