Extracted

• • Target
    file.exe
  • Size 416KB
  • SHA256 1c2d944b83f98a0edde0780110dad14d4ff382f4d5e9005612dbe3c3bf17cebf
  • MD5 9585e4c3b8589d6b2c8570577e9f0434
  • SHA1 17d1afe43ccbf46f62664de7034aa7ce49898829
  • SHA512 b2769496982be1e9320fd91e00a664e8c5ae4f4b88c0d68acad4474f3f1a68ac333841288719eeb15b1d00748973388a08aa98678d53db24e60c8057c1e34ba7
  • SSDEEP 6144:bzL+cQ/t0r0ow/MdpZBn6TIASfKPwSIMFjUHZTpphM3Gu6aNtUE4x6OjOuN:bzSt/t0r0owMdpZBBKPwkVaiN6rDJ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2