Extracted

• • Target
    file.exe
  • Size 460KB
  • SHA256 5e35d43dc0547f2ad5bc2094c0a119aa7cdb0a4be303b7e112cbf7d767dd2d62
  • MD5 16a01465af68d4616df8c34a5abc9491
  • SHA1 f10eb977b1b59c668586cd94f967b0a63c38d38a
  • SHA512 bf9c613a34e1d2890cab0a4713beb44eaa23867cb68a3cf0cacff769eaff9c50f0966e15c86858c21e4b98fb25ec16c355df54e1d8424551bc879cccfcc03628
  • SSDEEP 6144:6QCMegVAmE7AYgvb7pJxfyPFVefxCLi4TJiBIUJuek8n4dBA0XGcIWJY:6Qlte2Ycb7pJxazefxL4TJiYegyW
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2