Extracted

• • Target
    file.exe
  • Size 467KB
  • SHA256 fe570e1a1a4b39dcf828ce0860d7180eb42b3be56199ad1d2211bb740a5e73dc
  • MD5 ade800a2c26989af77af74b62e9055a1
  • SHA1 6cd4a2d4045f7adf73002a227e659a43610c5fd2
  • SHA512 7293c6a63be4444d43b2285c1c63094628e329e71247e89b6da7d82bf466df19ddf85deee808cd6f0430a3e6e2c9230cb39b339c6d7ccf64022a0c7c52da757a
  • SSDEEP 6144:7/fLCcyZ0HTAwofyy/HJ0d8+Y9zPnhEDmBV7w4tjAWTM4xVvkHb+ewB:rfGcyZGTAdKiHYYFhYmLcYXTMENi+7
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2