Extracted

• • Target
    file.exe
  • Size 458KB
  • SHA256 38afbc98f418bfb4feeb210af9ac226dc88495c99c6127d367bfe33e98090dc7
  • MD5 f1ca9a07e96835a0393635001bd0e58a
  • SHA1 3828765d069c58e9dd782514e17980d7a976acd4
  • SHA512 b088b174a32f56fdea4c017923e4117617e638734975d087ee35ad1ad99e3c41ee8227c19b30098b6f4f5d4059aa7f4966e9462ba79477873075177b4891d888
  • SSDEEP 12288:M2+lG61lHgoqqT7TDoTiTdFWhAsjJkQUOkTG:M261OPUUTZmKWQRkTG
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2