Extracted

• • Target
    file.exe
  • Size 454KB
  • SHA256 b0e25ddff72d519dccd3cafe6401ea98f49dabb9f05f6188f8492011a8e6e0b3
  • MD5 34d68bdb78174aff7fda4d1f1145b6ed
  • SHA1 9f676539c92319d6e841d0dedc264b0de83b7961
  • SHA512 8f0e9cea33f2c744fd5db427bd4d0762e7c73754505952ed151cb6750054eeb7aad2bec0485d61e0be8bd61c4c4fecb8bc41c05fd0d66870a14362a2cc8c0af1
  • SSDEEP 12288:+j4URUQruoJ967wKkK7O/zAqLZK9FIwhHO:+j44UPq9LK7OcUZcHO
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2