Extracted

Extracted

• • Target

    61d774ae487d0e21b3020445dae34226d19f17e97cb5f0003533a18501ca3dd6

  • Size

    550KB

  • MD5

    dee963872a300a754293c252e1e724f2

  • SHA1

    a69f8c5531bf78280f301451872b71c9e265f0a7

  • SHA256

    61d774ae487d0e21b3020445dae34226d19f17e97cb5f0003533a18501ca3dd6

  • SHA512

    0bb26d8b30e5aa152f16baa544d470b4b4b1466956ffaf1761aad96b53871d8a0c1398891d6b943440912e729eaac2d17b37564e1f62e2f17e8099fee10e3c4b

  • SSDEEP

    12288:7Mr0y90qVw4QZzFNLd9JQJXUWRFxHBXS2NG8seZtkqAGjxg:jyGZPd9qJzhpSXpKU5

  Score

  10^/10

  redlinefusanocryptdiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1