Extracted

• • Target
    file.exe
  • Size 328KB
  • SHA256 7feb20f3a7ff3dc49c8085ff2dce874da366e229c08ca22ff2a07a938c4f9605
  • MD5 78aafc6e179336023919eb86976bae4f
  • SHA1 1fe1b2f4fcb9953475b65549118fec1ac66d883b
  • SHA512 90e38d1e604651a6d2d88947296ac73bcb2a2904c36b515dcd3ce722f5c117723df527a202d06e6523b7fb97b279e23356892e376169007dd6071d558e54bfc1
  • SSDEEP 6144:XSDZQFIztrb/FijERK+PpfCrao8tQQsif:XS1QyzZ9pPMaogQH
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2