Extracted

• • Target
    file.exe
  • Size 365KB
  • SHA256 30c423066c7caa9bbcbceaddf5514e580d493eedd0d38ebf9702ddd75178d707
  • MD5 8388f7b1e5e5ba036441180d38c46039
  • SHA1 d5e551419d4552e8e45d55d029c83e0fdafa22d7
  • SHA512 2a3363ffb49b90e70b96150ed0c491cc454f969ae4ed7cc271283c94f5e9535907c660e4a5015a9823a15c1886ea25080c2af407f467e01132e7bef0a845f3ca
  • SSDEEP 6144:uuXdTYlwK9qwO5r3WYVBe1NL/hICzf4AgHLkWr/2/:uuZYlT8wermfNhIY0kc/8
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinefotediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2