Extracted

• • Target
    file.exe
  • Size 420KB
  • SHA256 0c619e4fa45cc4b3a3d7d2815ed536e90cfc0f1e705059188c0e84dfe06b9114
  • MD5 1d3df1910b59c15c78995105982ef095
  • SHA1 5ec67a9a14ce7c825572b77de16b161cc021ff54
  • SHA512 fb96437a2bbc48b76fb67ada8c8cc3565a5ec24c8ee9d687c448fdeb78f3a77a9581b5092fac943a68064fbf81e9eedf4e9390a369cf89784138245c5457f4fc
  • SSDEEP 6144:3793WCLVLUSaaMsoCjeUJ5noqPsdlpam6yRLnuffOINng6:3793R5LU21oCjB0dlpH6yRANnd
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2