Extracted

• • Target
    file.exe
  • Size 452KB
  • SHA256 48858c8c9370f41dfcf541eaa1b55583a0f09f30746242d91efd61ee7d579a1b
  • MD5 6aa52a9ae7d44a420f791af555646ff9
  • SHA1 57595490cbb721716d30e59ad81734ce77861a30
  • SHA512 ca9f5b76401e973facb6f98b993b120681c8afba82419aed54d90b1ddd15aa177726ebd3890caa6966ade9a1592b53eaf88ede333de6a645e63d89aedf7b767e
  • SSDEEP 12288:7xbJ1mCHepfGYWEWKOvfwJPI/TvyzADEmyi:7L1nerWXKIGPIbvyz+yi
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2