Extracted

• • Target
    file.exe
  • Size 413KB
  • SHA256 98645f77a5800d0afc76aa1d13776dea86ec1da897fa47a638cf27cb2410a003
  • MD5 fe3bb53eb805f470ba2955b198c79c49
  • SHA1 6ca5ed625556f2a73e1d4ce1af32da6ad6d51ace
  • SHA512 8913de474f128f2c66076aab9fb76a265e400c4c8cd645a327c4353320fcfb1cc6857b68c9cc729cc0a0497915cda5a48dd26071e855e17b4df26fe4b88cc020
  • SSDEEP 6144:7g8pMt0y9jLYjj5rblehIfC7j+8RBWrbxggnuRvmA2BOwUR:7g8pM9K5r0hIq7j+cBWCgOBE2R
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2