Extracted

• • Target
    file.exe
  • Size 459KB
  • SHA256 cd829622d48f02da6f64df27b98572bc94a58aae0a502deacdb7500c1cad47e1
  • MD5 d113716c087fee9081d3a99e7c14f47c
  • SHA1 2a2f08542b2568eecd9ac392e2ba0388b739c94f
  • SHA512 b6bc3e6dc259e7cd16fb7fa4f783e2606b2555b6c9b4da2199aea3ded78382b180164ba799854808f61fb87b661bb39efee4bdc56a4490c26f9ae31500b8c6b1
  • SSDEEP 6144:1DrSTIWJjvj0DncPObvo12hl8OOhtgv9VtG9nhXUcDeOOWk4dBA0Xq8aJY:1vWnNADcPOekjOhtk9VSX/nOW768a
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2