Extracted

• • Target
    file.exe
  • Size 427KB
  • SHA256 a3727adaf2de6bae0a02b458c1d6477efaa333e32e26ff9ca59274af216ccb2e
  • MD5 adaf4474d562fd6707329f905f038d32
  • SHA1 f72dbf92e321571c162ac55a1dfcaa788aece4da
  • SHA512 79b34e063952cbf278046bb33e41ee80468ef1082ca955788daf432ca255b5d149a9a952f31e479bf73d19d9c399f037c02855eba616ec5f8a03ab4939be177d
  • SSDEEP 6144:ZbLHdtyBuWm7XsHcoL4xj25JbRDmsLilMdG2d/tQK/fu1d0793mTbx:Zb7LUwXuDxJdyaIgG2ltQKXu1o3
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@newdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2