Extracted

• • Target
    13572ac4e7c7e18d60d9590ccef66950
  • Size 40KB
  • SHA256 ddb3ea989aeba953c5e62ab710371b75bd78eaee4dff5facf08ef65cd07e9bdf
  • MD5 13572ac4e7c7e18d60d9590ccef66950
  • SHA1 a3f50640b0b4fc5985f621f17b5d6f05d58ef13a
  • SHA512 9fd4e6a375507b6498a1948ad048ea2a54c59454a8f0cd8d80efa717ab09220a3045398207eca8b293b129c03ae810501fc760bce6b5324486c3e68abae99353
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineforinstallsdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2