Extracted

• • Target
    file.exe
  • Size 365KB
  • SHA256 0adee2b2103d1c63c66f4f7d3d1bd459420e43b0771df051c40d984b8d56253d
  • MD5 cb95ac8876e299ba29c73cee1d9249c4
  • SHA1 a7ab22594d8385626f6205027501cd64b095e01b
  • SHA512 55057c2120138945065ab8e4cf761b00f96b2a0649ca14646785c656acbf2c9df1ef1ef14b469ccba952e52cde57adcc297fa9f010ba4bbab8838e5fe6e4111f
  • SSDEEP 6144:1LJdbbLB9gUaUxdlLnHAUphMhSUcEmvVHe6UjQzrfmRFkXrx6aDHXyUC:1LJdvN+ULLHPhMhSUcHNtUOreirx6Mi
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2