Extracted

• • Target
    file.exe
  • Size 419KB
  • SHA256 d088e6bda4659fa0d8b2f79d3ef70e4c83e8ee22951ae91fb55ef67c3f8d7a9b
  • MD5 e9e5c9382b97420ea898dc076f9438cd
  • SHA1 e70fe26dfa18daa67066057c436f4f9ce20dfdf9
  • SHA512 326ad3a4a378ffd3913041ccf0fec046ee722bd01f8d3d5732b614cd5283a7b02c22e22686b27aab269ff33044005cd65e46b42f82b63db1af96ae5d56ff0eef
  • SSDEEP 6144:k33qLhAbmCbvBLiZOmUAxYLCrexli1n6J/VKkBhkZv/4pqnmLLyHNng6:k36FAyABLiZPUUm5Kld/48nmaHNnd
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2