Extracted

• • Target
    file.exe
  • Size 450KB
  • SHA256 bef9c098a2af2e9ee89b534ab1936e5bd6515ed16a8cbfb9f23f1ed8853f38fb
  • MD5 337002839ae802d3bb41e16245c6707c
  • SHA1 fc318cdc51acce66dacaacda3ef655660626ad48
  • SHA512 94b598984c5d4e27c9931859008844285ab7fdae5c8b6f9571f41c941a97e646f2f9f92f5af77324b2f69499c8f9d1b25c6102b69991887414105f2dcaa3e1de
  • SSDEEP 6144:copLdYEb7AgLyaKVuO7I7Zz5J3X9cl2rQjtlUTYr0iP7PdwDdfMS/sBEhK3Wi6Wb:copYEbzIVuO7CJH3XkGy0E7aDzEB3Wi
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2