Extracted

• • Target
    file.exe
  • Size 328KB
  • SHA256 7d9d9e26d565d9856446d857f9952ee77ba566ffd07f28fae223390c40daa5c8
  • MD5 b759115b4f883ae85af037ce07f7eb74
  • SHA1 e75c97db973563198596b7132bb599d7037eabdc
  • SHA512 a650904ef75efddb71d41b3d717de91379232d9e485ce6320505047df67e21bb2e1a3147fbc18707ec963c4e840160514672aa9b27931cc01381b5026255f0e7
  • SSDEEP 6144:yYFStCzbD4j/6AV9bhgFI1T5b7Kh4++ylkiW9g3I3I9d:yYF+CPDy/SFET3ypW9K
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2