Extracted

• • Target

    4bfeeb31bc6bf577688eab439cd5e32d21bf6e78550f621acc9d1f6820d8c067

  • Size

    301KB

  • MD5

    c780b3167a20b5a301cf38a47632e8ad

  • SHA1

    d40f9a142823ff045ef1744f295eea28ad5ea45d

  • SHA256

    4bfeeb31bc6bf577688eab439cd5e32d21bf6e78550f621acc9d1f6820d8c067

  • SHA512

    eec57c4cf26a638f9d235d101498d687022e71939a53edac0c11270b80f1e378ddacd084c2eba9a43705cfb6aeb7d4d4a4af369978f19de40667690f3cb95377

  • SSDEEP

    3072:aQ3XmDX/mIMhZYn4jMEi+Ts1HBIexK+K0sc7I/xTTvyUYGyraHH2DmcnnIHiJlqP:teXuIMhqB6mmdzxdYaH2Dm2nIUGjyn

  Score

  10^/10

  redlinefuddiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1