Extracted

• • Target

    ade8a43186c386a850ab564c076d80a389ee3be1e0293f1210ebf328e0e72ca1

  • Size

    175KB

  • MD5

    9f11bd99bfbcea926407437c9f964868

  • SHA1

    211eb34b0bac5ebd4a6ceba8c4be1a1b2b8a0950

  • SHA256

    ade8a43186c386a850ab564c076d80a389ee3be1e0293f1210ebf328e0e72ca1

  • SHA512

    77b2770ba7c62163cd2e490cbc8efa0bd60fa9c3543399fcad4443746b9ddebfbd1c0b99ce6a6c021d6ca7a781a707ec9f6c9107342832a3e97581363125f05c

  • SSDEEP

    3072:MtxqZWN9abUP0PMLb/a4imekK9Oh1zxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0E:M3qZ5MLb/xidOh

  Score

  10^/10

  redlinedumadiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1