Extracted

• • Target

    file.exe

  • Size

    332KB

  • MD5

    aa727e598ba7c5a947124cd5fd93ed6d

  • SHA1

    0de18ccace13691011506ddaad4ab72a2731bce3

  • SHA256

    62a2221333631de6cf65db3fa3e2650947b23f24ea172a3ea998d77baa0cb270

  • SHA512

    80221cec662cc89d12993edf8b289b89a4acfa481712d3f036a2d4f9b2c4f1ebb16c0a0a02f6b12d9a7ea0a9e6e5720ff3d797835f4fd3426eac9c97238975ad

  • SSDEEP

    6144:JvYd3tEPMde9vknpuXdSovd4OUHtDtUP:Jv8ckUXdpdCNDW

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2