Extracted

• • Target
    file.exe
  • Size 327KB
  • SHA256 09cd7db8edbe5ede4d66f83f3314f0f98bc088bcd3d6772b02e883ecee24ef93
  • MD5 a8a7081b92c6ad76b834fcc345a85c8b
  • SHA1 d5de147e3525900801cc9cd34d466a439a6e899e
  • SHA512 3f7e949b69e39d0504b0cf417af9e246eec546f2a8f82e18c77da1c7edf623dd2e7e457cf06212322eb3d087fb77ef7aeffc054a867430fa91fb8e0bb48862a4
  • SSDEEP 6144:7sYlDPoWznCkC7fyagFMUhpnbdshjhegm3w/Ci56:7sYhPoWQyag8ly3w/M
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2