Extracted

• • Target

    faf5ea8c694cc89edaa262cb82ebcad6ff2d625998a6d5c3565d6fd7251f3c59

  • Size

    392KB

  • MD5

    aa7ac7beee79c5539f9b5640e7eae2a2

  • SHA1

    ba386a5d7b39b45571051b02eacf1799b371ea9c

  • SHA256

    faf5ea8c694cc89edaa262cb82ebcad6ff2d625998a6d5c3565d6fd7251f3c59

  • SHA512

    1c73580a7f6de74f20fdc1ff69e6078ec5638b3005ec5a973b551737461b0ee3974520319fa0dc92fbff61a112dcaad28ee60a3b8885ed8bbbc427c0abd7fafc

  • SSDEEP

    6144:W5DLZHvX0A8vJiJL0fmMJrTxjmB225aPbVMHQVO7+7sl64HPWsr7su:W5DtHvXmGL0uIjQ2iaJMMOK7skItEu

  Score

  10^/10

  redlinedozkdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1