Extracted

• • Target
    file.exe
  • Size 311KB
  • SHA256 72e13ee3f2b24d3832d76a9356b89d3b0b4eaf04cd53a197e56447d00d72e418
  • MD5 5f289e70fd770eff10d5300c180c7ec7
  • SHA1 d3164cf3921200cf40a00b49e0badbef8c45fb89
  • SHA512 1c7ff50029389074ee1827c81dfd916c971b40576f9452e28904d2742cc646413ef36f8cac5ca86b15b8dbf0bb1ba583011efbc98f43233c74e97288387f0541
  • SSDEEP 6144:45LoE1FeS9Q3QSJdfvImk/48qENz0SceN+qYiZ+Chp:g8E1FeZ3QSzfvUIENzVcFq7
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@newdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2