Extracted

• • Target
    file.exe
  • Size 439KB
  • SHA256 6fe74e9ad2ccad5e034602cc88509a1cd74978e61650e9ee18f908cc45f047b6
  • MD5 5dd6dd9854dbe4666fd0e85ab73f0ea1
  • SHA1 1e9bb75cd5f92d4898abfbdc12943c44a53bbc5b
  • SHA512 3145dec17a5cb22c3d110ad7f2ec7f08132e05478e43899796160c99a00286e545cd0fd20aad6ff94721a927f679ffcac899930e10304f0b89e5e49bc432b55e
  • SSDEEP 12288:t7nkuRaQ1oEUO8g5ip3R79Hv89BdliSSbSNPIi:tDF51opO8ltlvilfSbSNPIi
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2