Extracted

• • Target
    file.exe
  • Size 415KB
  • SHA256 255c330c534da222b320eaa69869b5c97dca6917cab6344da2d8e8f22b61d10a
  • MD5 bfe93d533bdabe29640851b0e84a08fb
  • SHA1 2f4f629107fabcbcf13cc372d327c52d133c5d9d
  • SHA512 4f4a25606c97d3cfbaaa4749825c7ccb411524487d825a56ebdd93a0e682da0a6098d6769daaef0189f3420b0ad34bec43300c5733cdc6b288e59d32d74d504a
  • SSDEEP 6144:rgYLNfwRmuv9OeaV/t3KYT2niisjCdkSeduBr/vuZzxEmXCgyGQ:rgYZfwRLkeaV/NoLdk5gzmZznS
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2