Extracted

• • Target

    5541649253018c5bd49192f76d3e5046d05cff5278f19274591d75c9c71a0996

  • Size

    381KB

  • MD5

    b5c9dedaaff50f35df2728f7e747255c

  • SHA1

    326ce36f8e1fa4af0062444245ff465125e3413f

  • SHA256

    5541649253018c5bd49192f76d3e5046d05cff5278f19274591d75c9c71a0996

  • SHA512

    876720bde949830243e6e14ff5837fd54b09543a36570b078a8de76e4b47fa727fd15f7d5e21421e2b65bc8944d100ac07f59612556f891d600b65a00fc1883e

  • SSDEEP

    6144:AUkOC00JQszkDKRetQkkQWH5mBXDsXVxMfZAArUppgpRjFE:AUkzGGRetgFZO6MfZTASL

  Score

  10^/10

  redline@2023@newdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2