Extracted

• • Target
    file.exe
  • Size 422KB
  • SHA256 c57785442ed6e7870b3b749cf54e5d9ccc6fbf5887264fa9743447ac119a8776
  • MD5 fd40f4922f918fad0fa6dfdb179d9084
  • SHA1 15c057ae60beb3818ad97c08bcdcd71a60c5be2f
  • SHA512 98d069a57ece2b3e10b7a764033e2d81611c9b9767bf5da87c9cd0ee7854071a087552c0653c69ebecbfbf03e615584e0746023d651649491e142be25b0df6ee
  • SSDEEP 6144:g2UrL91ydzmY5MP9cNT/Sm6DZGQ/mrBRxyPqnI8Sid/YWZYw:g2UrB1yQY5MlA/SPD00CDyynVg
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2