Extracted

• • Target
    file.exe
  • Size 442KB
  • SHA256 3f48a68d9d7693b5de21dcfa91bff9d6e4b5debc8be1c28be20ac697e31e6e4d
  • MD5 6399b3b615b36bb16110859d3aaa82fe
  • SHA1 0ec12678ec4c6733c3e3b2a7c4f6f3a91e3c76c2
  • SHA512 d70ef88f23a0390ed7c76dad47820369200898e77182234a80d4bbe74be7719630147000bbefb90e97be8c9df39671f4373dbcdf03363d1feba6eefdf2c6a6ff
  • SSDEEP 6144:SsL8k5XlsVZ0aX/EmBWQpfbnAgkMz4CpFmPFM145ELEeYi6Wb93Y:SsIk5Xlo3smBWkAgkMsAUS+6EdiH3Y
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2