Extracted

• • Target
    file.exe
  • Size 460KB
  • SHA256 8d90322945a75f95e0298bbb9ca63a2a2bb065d571b542a671b9fc515d9ff9b8
  • MD5 ac96278fa998809b43306c4186558620
  • SHA1 0d7c4da22e28a792a8457e17171026237372c274
  • SHA512 72471fc8f7fee3ebad7235adb275d6514fc3e9618bc8935f94aa6c054d21bc10c75fb7336c8323f5a4e0bb9e501d0fa6ff983e6241bc792b96a1dbdd1004b85f
  • SSDEEP 6144:RCiVeTbHqzHhEEArKO+lXs2ESVQ1xPaailERgfK0o3ws3fyDqCFwSZG9:R7s3W/Ard9SO7PaDER4K0SwTOC5G
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2