Extracted

• • Target
    file.exe
  • Size 461KB
  • SHA256 54ddaf3ed13bb27ccf41e35ee3de46becc4b11697f2dc34f5ab7817d4fddcddf
  • MD5 e85567a1c4a2e08a844150b70299a4fe
  • SHA1 b4079aad3007c63d4add82fc1745a627523cf9ae
  • SHA512 3460b70fa2ada8ed8376e2e4637b245ab983284da8f1afc238c765c93f5d57ed9f5a77b9426fc441cc0dddf7a9e32bc8cbd6636e60a5f06e8d9d17010fe6f488
  • SSDEEP 6144:j9iLYZ0vBMQETkpru62X2To1D4CINGlapGSHXROPZElnyHSI0dL4VxY:j9i40XETkp663o1D4YObROkTPM
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2