Extracted

• • Target
    file.exe
  • Size 412KB
  • SHA256 54f79f35b3242c72e9c5a81640a648bb09a9dd35f1b5924eb8fcdf21459c900a
  • MD5 059da4a412a16794fae92268cbaf3634
  • SHA1 c64449b5ea9687f5de836e6bb7482bdcd4c43f5a
  • SHA512 ed4c18b0a752352733e03488652a87dcafc35cb251714061c75ca5b348d20aca7231f2ad3800949514b7668366efbee3075095cc419e9621b924e291602e2c36
  • SSDEEP 12288:bbx/eUQlLGsJYQiHYeuUMmhAb5JWFGvw:bteUQxGnF9ybW4v
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline@new@2023discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2