Extracted

• • Target
    file.exe
  • Size 454KB
  • SHA256 76a90df17d187edbcfb22f5dd6accafe2df1ede24105839da9174e39ebbe019a
  • MD5 706309bb0a2a86594180682ed6fbad16
  • SHA1 a644d3d2c1a272dc8990531997d80bc4ac1f40f9
  • SHA512 381b2c0d2c6c3daf132c1a02c7ed34276c31828e9f416ebf16b8f37cb018e7339b66098182a689826c228b5094737024e9e6152440e85642a3a2576a82849cdb
  • SSDEEP 6144:XKuJHlLCzoCYpi3In05FCZyzt4dGSx97VEmiMS/sdKXi6WbP:XKuJFmzoCYH0uIcjx97qmsEdKXi
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2