Extracted

• • Target

    file.exe

  • Size

    485KB

  • MD5

    6158318928d7c1766fdcfaa709a7abc3

  • SHA1

    8e97d01124e506d2eb3a8dc2a214209c12e36177

  • SHA256

    d378bbf249a91273ed467359e6e604b84030b161521cf621092dbf5767bf2deb

  • SHA512

    9030f42975360b0c56fb7cba0d5b9b7a2b614e5b5ed80e2ab0d1ac473ffb4c1ce21fbd1f20b167039e44f781d21759d1e61d14968335b89bba16cf021eb51baa

  • SSDEEP

    6144:qxX8cu4pLaCQCXmIwytBvQNieHfV56BMW7ALzj9yY7GSHUitRFCFuedWc++g:qxX8NE2CQCXm7ytehVkMFjGSRt+++g

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2