Extracted

• • Target
    file.exe
  • Size 328KB
  • SHA256 ca85cdc41f74500ba622acaa0801f995ab4fc4d5d7bf3c53dd6f11cefe0e2ae9
  • MD5 49d1ebbe8d0ccd70542ef3653c67229b
  • SHA1 ced171d574328839c73dde57f5697d28d7147a71
  • SHA512 3f374ee8d34b01e184114f2a99337d109f68ed6d3f962aa74602a9f8b0fc522718dca88770def195452275726a569dfa379e81faa5822bb4741e3f9f12559e08
  • SSDEEP 6144:bA1KUaSeDa6vuMCYhZCnUzU57dNf6rkfJmZsRBcsYo:bAMPSu4MCeZqUQ7dNAk886bo
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2