Extracted

• • Target
    file.exe
  • Size 350KB
  • SHA256 ddcb01e331146bc87fbc9711dc7749c552f86363a374e6fcdf61ea4b7e6d00d3
  • MD5 0bf66814bc9ab6ee184166dd12cf102e
  • SHA1 f330e2d02dc432b0d9773230a32e12d98009fcc9
  • SHA512 513de7cf573cbb8b092ebe793a40b640b24d3f48945b78d003210ecdfebd01f1cb6b09f3ad80868797071ab51f550b3c8a86b4b76fb1b41d48fa4bfc9df43972
  • SSDEEP 6144:H02Se0tpLbdOrpDN0EjPBAfhOogtq5pLLXjHDnl9liNJbcdtxeIyDZ:U2SJnfdOdOZfp5pLLjjlrVdtxkDZ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@2023@discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2