Extracted

• • Target
    file.exe
  • Size 409KB
  • SHA256 f631e0f585f43a7ea2cb466f7fda23b13fc0551206207c027eeffbbbf153db3e
  • MD5 a73f0d3af42f6d6c3e766e73073c8695
  • SHA1 54275740146c1533811bf3563e222c0aecd38875
  • SHA512 e9fd62b072dd6cd7f7c658098941bf4283c92d1d8d431aece24fedabf4ca37a0092dc5951c511daaf23141944138467d84313e60d58c3baa93728106e9672e04
  • SSDEEP 12288:HS2FnwTvpLWEPBw4RIrbU1p9CJb7d51S:BKzxnGrYz9qb7d5g
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline1adiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2