Extracted

• • Target
    file.exe
  • Size 414KB
  • SHA256 f6ca1a1d18dc169801490f33db3080a5f17fdaaec78b3d99f9fb6d60e2dfdc30
  • MD5 7349ec2f080e9195582e2f28169667b9
  • SHA1 9db7c5fdc40c7de89c41520af54e1d9413a4a6aa
  • SHA512 ef801ed6e9124bfce83e9add362d6a5c4fe5c03b4153aab7e7b6026c1183cccf8d4c4b340e19a196a6c0245875319a8305ca3dc3051441d8a66d32e95598fc09
  • SSDEEP 12288:0pYA7IBg6+x718MENoRa+02aN9K1rXttVGlmZznS:CY3Bip8MUFbNA1rtYmZ7
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2