Extracted

• • Target
    file.exe
  • Size 432KB
  • SHA256 f6dfcddb0f827c0c8f72c4ffa9b8e227627243564828ee5011bcb71a17e493ef
  • MD5 a1154bd8991e0d817c2bb68f60fa3e50
  • SHA1 878714740e757e5c328a3e00d741bfd97bc70eed
  • SHA512 f0f81e6eff72aeb4666194835135c84fb5d8df08299cc8298b3b324cc80e11df18090c1518e418ed938f54817029c0db2f49e360567d4d9b1db35bbc731362ef
  • SSDEEP 12288:lUaQApA3pboc4XCoCtRvk32x/IAPX82wlXzLiCE7:lUaQAepbKXCoYW3k/I92whzOCE
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2