Extracted

• • Target

    f0db4c12553fa987767a8eb552d6c990a7d8cee9d09a104048082676dbfd0316

  • Size

    336KB

  • MD5

    3a897188f3fd6bdd83aa7aff325154f0

  • SHA1

    a227ca23aa9e37ed2c82b96993cc737981fa2975

  • SHA256

    f0db4c12553fa987767a8eb552d6c990a7d8cee9d09a104048082676dbfd0316

  • SHA512

    71d1afd114afe93090af3e10dcba566dbe0ee0446794981d8d88a8c08e29c1b2e2e98d974047378e6837be0c9de68edce8ad93dda16da6b38e863dee68dca61e

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

  Score

  10^/10

  redline24.01discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1