Extracted

• • Target
    file.exe
  • Size 432KB
  • SHA256 d8bb93dd95d28379498f9e48337c3d8bf9215b9d3f665a5bbd0ae787de1c975c
  • MD5 22e439a460a6dd885fc850d1552c7335
  • SHA1 9ac954c8793daee4bcb6c2cf96c320c12e3e89f6
  • SHA512 2bf749d1a9a53c3c56d25bc69893c3abb2732b0dd6c8bc256bfd04610fb36663a14f5cc84d572cc753862db3df105f50ec95cc01fac821d38d6a35bf4bfb3341
  • SSDEEP 6144:c6rdmWvLwSnBHdf6HhMfdK510LGjwPfhbSn6X+nbFDzlo0WznEmQLr:c6dmWvFnB9f6BMfdgi5YnPbF9ofE7
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2