Extracted

• • Target
    file.exe
  • Size 329KB
  • SHA256 406c75b9310eef0fb8905cf7e7048dfaab730c247ea5edfbfc9c7b51e4287b88
  • MD5 3eaca76223d7e48db6c64e6aada8ff09
  • SHA1 5f5bbe80487adf0fdfdc9f9f805430b707c103fd
  • SHA512 f8b43039e37595371605d0e92e6c8d0361ebe6bdf99797f4ecec2863aa1354a0a3f5ff7ca1ba4a2184abb22cd0f5bee14360d659be8befd754914a10653bd352
  • SSDEEP 6144:xoG+XD/+DHdPIPfomNqFXy1N2UugGC2wOxOiaeoO:xozXkyPfomQFL9w/iab
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2