Extracted

• • Target
    file.exe
  • Size 458KB
  • SHA256 6bc6bb3f6e34f6665c9298b425ba7631e4b7ef0a7f2b6e2eab39779fe82e82d5
  • MD5 d714b06fb09e673ea207f6ebb678d90c
  • SHA1 d3b76977ab39a5aaa15bd7e7d00ea754cd58ddda
  • SHA512 7009b533bec723f1e5eeef40132bc27e9507a4e881e13d9fddeee4b0bdfa12daac85d72f17283ca4a07190b5a1dbfd2d19e9b0f345935bcb8b7c887cfdf4ddb8
  • SSDEEP 6144:4J1LNlEpbcEXL+1RCdc3qJN/axkzU71rVPNRgC6t6PCNlN4OPZElnyHSAFtY:4zhlE15bSkd/Jqp7gt6jOkTEt
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2