Extracted

• • Target
    file.exe
  • Size 417KB
  • SHA256 edc7c01894d3645ec73c21b4b3b8b50bf9863a10a5d4ea6c9404dbbb835c8f68
  • MD5 a700e077a7c95a0d177af2bfac629f64
  • SHA1 daea0489a5afac708dc6b4eedc7f0995688f4a10
  • SHA512 e7da686c1aaf6476ce45e342a60d3d10e5dfc50b61e3b97e6f45652ad61ae9cebec20613c9321260569a9b14baae93e765680e4b39aa65fb69ed45ac9b65c848
  • SSDEEP 12288:by2iWVBIV+WoF8WpLYNAhGYW/VZTrvFJ:bjBIV+WoF8lbvVZTTFJ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2