Extracted

• • Target
    file.exe
  • Size 361KB
  • SHA256 3e34fe36ff929921c1ebb88543d6375b64e7fb6bbad755ee4ef7aeaa26901bcc
  • MD5 ca04dcd5445850c28afd145cb0e84fc8
  • SHA1 b92800080565823d106c7a85aa570db0026b233f
  • SHA512 bddaf1718f0c7caf4ab8ccec99867f5f53943d6a4192bb3279500e771b1e871341a8168dd3e0a873092fbb68c3084c9c3e23858e82127cc89afb8a36626319f2
  • SSDEEP 6144:tcdCVLjsiB7WppwP51akTq9UFg4kg4sDYAj3gW9rCFXDHX:tcMVsiQpO51K4kSot
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Drops file in System32 directory

  behavioral1behavioral2