Extracted

• • Target

    file.exe

  • Size

    431KB

  • MD5

    a872c7b5e8b8208bfc3253d7147b1a95

  • SHA1

    4d97d77b69041386787f7167955306d860b96437

  • SHA256

    2f9660f6f243323ff4236cdc88fa5a057ca9f65e042f83f59a3e2461f122245e

  • SHA512

    71708b5ecd512a01acc3722d90c819694b3dc7f5c4fb936ad5323ab45599f2178fd73144b71eed8cca0eb4e4067445310a13e241687bf44dd2b56d501d0c0ca4

  • SSDEEP

    6144:8rPLwnWqidKS9Kl03VYCFms5eBBhcAUp6ej2ynEmQLr:8jpqioS9nmCFt5dAUp9j2yE7

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2