Extracted

• • Target
    file.exe
  • Size 374KB
  • SHA256 61b6ee87c3fe90ce06b9efad2cfd0614a1df06e13572b27740d5be577e77f7f3
  • MD5 45e0264ca2703421a2370d7359c71e96
  • SHA1 a723202e102908c678f96783945ede860c77ca65
  • SHA512 89b9b583d0c6fb80916cfb2ca63472d952000d6308895de1cd1435c9a2861d3bc91fd8777354c4c21bd04e36b7e82b9d282a8e39f3d492af16681f3e48a8230b
  • SSDEEP 6144:yLfzc6euxN3ZbTdU7ELlfyuVewSu3TCcWvU5w2kxL1ui3tm:yPc6xxN3ZA+I9xu3kU5TqLEi3tm
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2