Extracted

• • Target
    1084-56-0x0000000002290000-0x00000000022C2000-memory.dmp
  • Size 200KB
  • SHA256 c66a5f3e46e67b7201e4ba85d2d28d76e58db8cffc196daf2888148ca1901121
  • MD5 3a87bceaf89e70f70971df64f6a65636
  • SHA1 53791d87967a4d24cae79c7ef92f6ce5d60fbf7e
  • SHA512 47cd4090b69d29b486ee92c765f0b972256922f970bca94596819f1959239580224cf2bccf9bb90c45ec5f5d6250c6f5e44850b6d082d8b324aeb0ce3daf2f8f
  • SSDEEP 3072:mxqZWonaxIF63bJqs3sw5ek29whzHxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jn:MqZ0bJq2fgwh
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline1discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2