Extracted

• • Target

    144443f828b14aa5f6f82e516a951ffae266052f38122312faa7e3eae922ed6b

  • Size

    359KB

  • MD5

    8061b7f236c43d036c55240acdc31e71

  • SHA1

    109c1b0c0576e4e4b37fb5086df88d935f7ab99e

  • SHA256

    144443f828b14aa5f6f82e516a951ffae266052f38122312faa7e3eae922ed6b

  • SHA512

    f38ee4c19efd81c630e2d466dc0e5a1256be3eb21f0c533aa2381a91238a0c050ce70a15812438a5e17363d8f8130e34808ef47c459a55736d0cf0f7c148581e

  • SSDEEP

    6144:KHkr3E4D73BTRK3xF6FtDeI5tw06SXTPweTH/ML3SfOTjFyIZYUFSoG6p:KHkr3E4DTBTRK3xIFlvtwWXT4eD/lG/x

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1