Extracted

• • Target
    file.exe
  • Size 417KB
  • SHA256 e93673eab07c28ce74b4d44c3f4ec196e270858b2efe7d040809a2f828ae2599
  • MD5 f75690e7d3a84c73e58ec38c6ddf0c8d
  • SHA1 95380c434e25542459c9222981c9c4ff1241353c
  • SHA512 69f4a997427c8c00bbd0fcef8c7549f8aac212c924d7fea52c62790befe49647aab47c2ca64c3145accec0072728076fb78f6a26b259ec1c771db367f240cdd7
  • SSDEEP 6144:MDLntoVtITC8g097dZlyzYe7vQ2eCD3NneV/T6X5OuN:MD7toVtI28gEvyT0IdeVIJ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2