Extracted

• • Target
    file.exe
  • Size 417KB
  • SHA256 6acee31b7d70a5d29bd227366ca6ff41aa3f40086fcb6cdac93181bbb4052bf8
  • MD5 ad4534b97345680890953fd0ff0d068c
  • SHA1 cb4978d1f7bd20f2b6ae882b8900dfd7d103e778
  • SHA512 51f40f9d6cb6a71869a5073218458da31e8dd86261d9f78e6a72e96f74c19f831058a7f68317e97dbd35a3f0ca899bcb05fb619dcbb7ebb5e91596934b7a3164
  • SSDEEP 6144:F3L2WW59qiI1TC5Xkcr4A9SD9QlzhEvtmWM79/CJTk637eQfnd5P7giB:ZI58bAv4FD9rmJ9CJb7d5z
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@newdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2