Extracted

• • Target

    0x0007000000013990-1062.dat

  • Size

    175KB

  • MD5

    c989e21d4ee393d1b14e9d363a8e34d3

  • SHA1

    098b257e39a1de3281054b53f9a70fb884b6228d

  • SHA256

    496a58f597b38eecb1deb64bed3fcdbef0d2f7fbfd17b81aec74676a9f81086a

  • SHA512

    48603874a6e58f364dda0f8026f28712cc1ad81d6401950684154653b9b0a51d3859a12a77a46a3f935fe386c1938d95e45572f9af8728ead3636fb03f37e73f

  • SSDEEP

    3072:0xqZWXragQx+/QpeUyUwUeRH93h2jxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jM:KqZWQpeTnP3h

  Score

  10^/10

  redlinegongdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2