Extracted

• • Target
    file.exe
  • Size 327KB
  • SHA256 fbdf7b639d67af9344ed2d79e31142598fef0178b4ca80dfdb47d0d2d139ccce
  • MD5 f7c682f24d1bb4e14b58765e10e19da1
  • SHA1 3f407fcc473cd076d62ca93bd58fba2aa0cbffb8
  • SHA512 a6ac244641fdc7f4b91a6a63a3ecd4b18eacd81ff20d0d91786a37b7de1a1db2a4f4ce71b9853b9bc485e8686681cc55d0295b856e23b030751b62b7ae202d55
  • SSDEEP 6144:h69//vYukvOCldC8zz4l4X8QYP8TPILBR3zmBaMySCCv:h65/wvOGCDasNP8jIL/pMbCC
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2