Extracted

• • Target

    44cdad04d60f466798bb44d7e8e7987492f1a002740e2899762e20ba6c1e965d

  • Size

    421KB

  • MD5

    e668ed4a94c76eea97a860f84b9938dd

  • SHA1

    04a8b348e0e943ad7c0057c16226737658040e09

  • SHA256

    44cdad04d60f466798bb44d7e8e7987492f1a002740e2899762e20ba6c1e965d

  • SHA512

    91eef2bf571ac5c79704e49ab84511901f5660a98fda6a8cebebb024e303ddc51333da746e3721ce89c78326af665abd59a7aa7b4b7bf598aca0d7bf798fe252

  • SSDEEP

    6144:D0hKkOROVP9Ufanin/TZDH/IcdZvtpeVxO6WTu1g:DiKkOROV0a0FH/ndZaa6WT

  Score

  10^/10

  redline@2023@newdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1