Extracted

• • Target
    file.exe
  • Size 433KB
  • SHA256 f61f4d8a67d58ba7d66800188447301724d2bb10e04e086d04bdf3c481a032e0
  • MD5 f10ff2556185b54f52c05f30e4220f03
  • SHA1 96c5dc3ddc00d11e328397cc98cea7e769c7aa76
  • SHA512 c53b6ab838673b85731e0efd688eec84d589f6a2bde712743ad54fb61402c2db8d068084e793df2c7111f69437e162fad24e962ded59139a1be72fe4ef85241e
  • SSDEEP 6144:1hL7LX1IQbK5pA3RmJKejl2h8qNWQaSF5zrwgvsY45bIKLci6WboY:1hfLXLJRmJKejwhGBSFprNve0iyY
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2