Extracted

• • Target

    9c4df49831029d18834890ac5dc30e0cb85889f25d32a9399ffec3a13aa2ba02

  • Size

    412KB

  • MD5

    1377508ef59f531997632aed6b2d4071

  • SHA1

    291c1b4f1c0921087150e3c349e0472640e5ad4b

  • SHA256

    9c4df49831029d18834890ac5dc30e0cb85889f25d32a9399ffec3a13aa2ba02

  • SHA512

    9de4ac6ddc4649f036021e9b9662fd6d87d1e9011252c0640d2883dc01030c1c7d7e965a69696a57a40689be6d2b808c1fed4199ccc3dfedcbeee81882906721

  • SSDEEP

    6144:sRQJd+1BBWjkE/zm2GJblDE4O1QFe3Pkc5UjOJKqdJVdjfhRHfOkpgpRjFE:sqJd2WIEr4JR3O1LPH8OxVdjikSL

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2