Extracted

• • Target
    file.exe
  • Size 412KB
  • SHA256 735ab4afb473c98b01494897b99c6cf1a618252b30af97bffb19b1bb00f890b6
  • MD5 cf10ef4da16866fb2ea2b5f0a5a0a8f3
  • SHA1 2a865e56e60de50e1e7c285f0f5b2587c00594c5
  • SHA512 9bfe2106582f1f7997dd2990b0f50042726c83c194a08094d61c5c93714773b61868b786aa606d42c2e6f95c4898b094be8956f32fdca2d6ca90ab637e8071b9
  • SSDEEP 6144:hWbyUphMigtI2mDj+K/AldlWgQn95si4CDK9y8VH6r0dJXpgpRjFE:hWbRppg62mWK/IOtjx40y3h6rkXSL
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2