Extracted

• • Target
    file.exe
  • Size 412KB
  • SHA256 d897e4f3d3b9a3102fdb1e784eb5c711a7f364d618861fd4fa41e295bb23f53f
  • MD5 f00551f4b6e9d78512ec13b17791362e
  • SHA1 c8b60e6449ce69d70209e666613124bb55e53882
  • SHA512 a71b673875a27b4761d502c9595ffc5fc70908fcc78f3f6bbc31d7924605db85c1d7c9b57a0a73a72ff3535ec0a60abbf0a9d1979eb5a5010a6c44c986e2eda8
  • SSDEEP 6144:66LQcx6XVci5VV/7HXjCUVh/MFkWRvgqwyYyMlfCxt/cqgd3:66Px6lL3Xj9ENOzqrs
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2