Extracted

• • Target
    file.exe
  • Size 417KB
  • SHA256 ab1aefbe820f7c7dfa9e0ccb6089da9ec71f11a0d44488054c5a8b8b52e925e4
  • MD5 ba05aa05612678241f55ddca000e2f61
  • SHA1 6d0c71ab98ec5a3686ae7a63108398a71a56972e
  • SHA512 c0baa978e10a33f28238700c21950abd0696dfccf5c647378729559ac242975c26e176e02abb1b77d1230670fcbbc3561fb3dcf0afc8fbfdc1354abe669e6490
  • SSDEEP 6144:rYL8gwE59S9dRd9qM3SVFLjruj8zeKsGhc9/CJTk637eQfnd586V9pGB:U15E9dRd0lVF/y8kGhc9CJb7d5/
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline2-2-2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2