Extracted

• • Target

    stealer.exe_

  • Size

    300KB

  • MD5

    ae7d38c71e91d9bd06ef0d5e4153e5d1

  • SHA1

    c54746e1e70454fea705ab15ea704073e2779044

  • SHA256

    2e8a7dd6d7faf24ddd19852ad25c2da3c8b8301f32ec841cd54284015412f07f

  • SHA512

    1c913ffc3875085b9f7087fdcb51a58a6a1e19e980d63dd0714d2d18ec508b83d389472bb6c23258c7678c958f982732cef4d0f04a12311bebef4f26fba4b477

  • SSDEEP

    3072:acZqf7D34bp/0+mA+kyI7BQwg02+B1fA0PuTVAtkxz43RMeqiOL2bBOA:acZqf7DIFnfmcB1fA0GTV8k60L

  Score

  10^/10

  redlinebotdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2