Extracted

• • Target
    file.exe
  • Size 414KB
  • SHA256 62ca169300b549058519dacd6d109bb8fda5e2b7a4a875aa61cdbe2db2541d45
  • MD5 e851b264ef02573ff484d0e917d60837
  • SHA1 e9f302b97078cd4a90d15a19967283ffd710a6cc
  • SHA512 3d34523f6988a86776977d438b4b7b788010c1b1cbd2c559999857e4f7bc9b979830dc9a9d77ece3a83adac6539d7b49fb1d9b47f066a93eb53c25d51a8d5b21
  • SSDEEP 12288:eAYtTvOKlcEH5Sw+Wwt/xWYqxACRYTURkFo2Y:eAmr6EZSwnsq9C02
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2