Extracted

• • Target
    file.exe
  • Size 362KB
  • SHA256 f3f16f89e812ed5c799c4f65264ebab22cf132ec4c21c55b032e56b29429af19
  • MD5 315290877fc59e478dbfe73ac373f28f
  • SHA1 be4f52332323490684cdd501e5de551631f8ecee
  • SHA512 19aa7253c793ed28451f30e1e7ac71df59c243e55dce91299592d61f8b3af7d75cea602b22d1368279d0ab8d8b911bfa1bb45d069d9868047d4f4ab86cf25ba8
  • SSDEEP 6144:nNnLVGAHJ6Pzl3Is5BjrureEdEANB9p1abXAYEa2R/NSU9:nxoApOSgMp7B316XxEa2R/NSU
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2