Extracted

• • Target

    c4a993a439395763eaa84f6f2cdcd20c2b8d3a9bafe795ce1874f7d510d34293

  • Size

    709KB

  • MD5

    2e9813378670ee5306aea0d39794b450

  • SHA1

    bc27715b7741492851b146dc3eaad9fdabdc586f

  • SHA256

    c4a993a439395763eaa84f6f2cdcd20c2b8d3a9bafe795ce1874f7d510d34293

  • SHA512

    8383846103499338e231737ba23b8a3a56420d4b03510ae254c5fb42ae7f82f15afcfee5e2f1513834ed1c1bf8c6db23c1d27aa57a9547b57519a82a1e8d9c0f

  • SSDEEP

    12288:cPGO3+TQNW1wTpHK2eF8kF4zv9b01yuiEtIlu1Y23b5Xa:SdNbBKDZ4truiEtT1Y239

  Score

  10^/10

  redlinelogsdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2