Extracted

• • Target
    file.exe
  • Size 452KB
  • SHA256 d9051c5663ef7716379b64aeaf50dfe584ffaf16f87b24dbba9b2c6f437cdc77
  • MD5 cf23f26f6f82b28d5c1614e3e8d87126
  • SHA1 539d43bb5c53b17cc601c4ba4ea32f8f4e5b4460
  • SHA512 9700c4050380c41e28a99c258a0881ff86d571f085c67ff62bbf5c05a5dee300a034f595ae4d7a802dff7ef7a3353b0497926001cac9dfbef7ad100d2ed22139
  • SSDEEP 12288:kgjgNRj5HBz1HsgMHvSkgeoSfC3ZidtHUII8:kgjgNRjzqgMHv09SKQTUII
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2