Extracted

• • Target

    0x00090000000122f6-1037.dat

  • Size

    175KB

  • MD5

    be0af2a7a8d178d67fd0db5b74a4b3c0

  • SHA1

    931fbb418f73811022c0a5c906e15fecebf685da

  • SHA256

    de1684ec0a1f661fd47c4b9c6b9dff869a45a22f8a1fd9802fc142360231aabf

  • SHA512

    3039cdb9cf6ca4cfabf6a7f2f74e8bc2812fb043a6c31a5ef6dabbcbdb7409b13cb8b10dd09334d0129ec0d55671d57048ad6c72c5d38dfbe2e3ddb1329784dd

  • SSDEEP

    3072:4xqZWZRanU2n0/Z62eJ5evJ9ih+PxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOm:mqZg/Z6XJIih

  Score

  10^/10

  redlinefromdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2