Extracted

• • Target
    file.exe
  • Size 420KB
  • SHA256 53dde8fd93d9ae808232773b2de83b6d7e4e775992ae26776c7cadb784cc4bd8
  • MD5 70141bd222dcced628a360f5e0605eea
  • SHA1 501fa91a1ad9c14232b41a24b42611fef15ec40a
  • SHA512 c3c084b4fba7c4152187b07c2feb0c4e4887697eab7d2b7c6adf0437adbe01637bf31c6b9d1ec96e784a735a88aaf89dcffcbff2300b0bc39a58470f0430fe46
  • SSDEEP 6144:CxcLLCm4R3IyGhdNLYrL4/umR54rdrBYFMHdT5EtpSO3x5gq+:CxcLulxIy8T3/umRgd1rTetpSOh5
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2