Extracted

• • Target
    file.exe
  • Size 415KB
  • SHA256 cd60d96f4ff6376395cbe4cdb098565ccfa8845c4c15a0ca77d0dbf5cb49f7ea
  • MD5 85ae68bf560fb2da39b19299d8428263
  • SHA1 705b337edc43e615945297eb82e644699195c778
  • SHA512 644588f6a39d3a0c21159467427e30c25194d80fa5c9043376c87a65bbc7cd4b826b39bbe6ce81407b074538b4c9a965695b86a60148a90a5d027c1af7dc1adc
  • SSDEEP 6144:nniLY2mKwcdCHzDcUu2jDORfEwjGzvpa290OrOwiCHjHMM6mGVvuZzxEmXCgyG3G:nniU2mKwY92GxPjUv7YwiCDGmZznSlR
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2