Extracted

• • Target
    file.exe
  • Size 311KB
  • SHA256 2b4cde43e756dbb5337d00fb45dabfd9edcd5c83cd593b7f9f365320fba09727
  • MD5 91c55531ee20e53920b55f525ecf0d5c
  • SHA1 1d945a18faef6bbaffe4928afdabe10b555478e9
  • SHA512 48cc79f63f379a8bb697f286fc00a3389181b9e72588dd4c3c0a6de2b64af0548323668dcbbce20c8f5accec6b2749270fb4296b7131ee573883d0e2db488399
  • SSDEEP 6144:r7LXbE4lcE6wPGXBWauUmA6OQUF1q0pOndFchF2:/zbE4h///UN6ONjYYj
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Drops file in System32 directory

  behavioral1behavioral2