Extracted

• • Target
    file.exe
  • Size 382KB
  • SHA256 36a854876b78342f73cb65b505252e136c07834f09083b519fcb50a4ca08197a
  • MD5 a0413e2471b40d6eb42758ce1da93a0d
  • SHA1 6cd9ba4b8211343d3f15c8de0102e0c0f6e762ce
  • SHA512 7a8126b52478f51d842d21f63d699c72bbc95652c094661e72cf1eadf4943183937bad0b6ea5e02e368b78fe61dd06aaa77568789ac209a79eac3a9a03948efd
  • SSDEEP 6144:9fLqgMPXUzsYh+D8ThNj+mLWvovuAl/E27jiuVOvTFjN/tm1YDZ:Ndi4Rh+gTh++WugBN/
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2