Extracted

• • Target
    file.exe
  • Size 454KB
  • SHA256 3440f2300ea8ca473728d7ec8e936f53647fd37af0e4947c8ed6fc107d0d279c
  • MD5 c7afabaf786ddf66af8dc4f20623cde6
  • SHA1 7f1d56486d40476778a26c57cde970329531e46c
  • SHA512 b89d4a34bb9c9f03a92a5963da2ed54e39e054b822dc13db3e8f15e5d7f093c366949051cbb912451240fcd4d339215928cea365d704eebcbb9f42a14a505000
  • SSDEEP 6144:4buJHlLCzoCpLV+HO4Qua07yvC0VR0QQ07e/sme7t0VMS/snvi6WbP:4buJFmzoCpLmfnwC0z0T0y/smMG7Evi
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2