Extracted

• • Target
    file.exe
  • Size 458KB
  • SHA256 bcf0edb110d23ffbee35628639d0ceb0f2cfb010173231a7b5991ad107f657e6
  • MD5 6b31bc0c4638df322501e431484470c1
  • SHA1 3b13e57079f2e790ff753985e05f424993b33e9a
  • SHA512 75dc040f37c3f8f9532654a633883770f34b612a19c76e76a9821c3fe7e72de018cb777b57cbd80a49631039e86cd53ebbb9cf748a83794dbe469ea72c005c6e
  • SSDEEP 6144:tHLy6KEATmk36zWxABVU5XzQTK8VobynJvppae2foSpOPZElnyHS2x7MrY:tHu6LrSx4GFzQRVo6pae2A2OkTA4r
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2