Extracted

• • Target
    file.exe
  • Size 453KB
  • SHA256 ed4e4058f01be9faa0222586e0ba4817cb7f573a5ff21145698ad976dbd54b65
  • MD5 840039bf13bb9197b2b2cfe2ce0be458
  • SHA1 659200ebed37c5f2076d77bc3cf207f78a2cbb9b
  • SHA512 fc587d652382eed4e00f5b0506c59c97f622a579a1b125706d494d1b1c19d378f4ffe1259f98503fe988070bc457b1d465ab21eaaa55ac2bbbbf060194747ed3
  • SSDEEP 6144:yHHIqVq4RrfKI242vVU70b+WYimERAAI40R9TUuNVH7xmPclSp9z+kcvP3Zi53tu:yoqVq55SwKiQ4S9TXNS9zY3Zidt/
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2