Extracted

• • Target
    ac112bd5a2a212fd26f6bfcf3803ec95ec2d603c5f800d743961325d9df321e6
  • Size 306KB
  • SHA256 ac112bd5a2a212fd26f6bfcf3803ec95ec2d603c5f800d743961325d9df321e6
  • MD5 5fb3ca74d6917b1d270bcbf19ec98502
  • SHA1 aa66b2967c2e8c5889fa24b490274a7a516f0a3d
  • SHA512 1ee20211229c670efe39b951343245a920856bed909d0f6995f902c85a5c4440941257ac08d6c228e5fe9f7cb48e80a07fc37494db917f656f1e905bd13ba40c
  • SSDEEP 6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinespoodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2