Extracted

• • Target

    85e2183fceabe61d59a192e91d1c01621c45518f76cd291e9fe478b79af2d3d0

  • Size

    392KB

  • MD5

    9b5d780256d3bc60b3baaaa2f4ee5e64

  • SHA1

    738748f016e24ae1e49ba95f410d01e77a23b6d6

  • SHA256

    85e2183fceabe61d59a192e91d1c01621c45518f76cd291e9fe478b79af2d3d0

  • SHA512

    372821322cd80f9328f184bd8ab01fef225175fb1c00191c79e9804b892abf18f980010d811f6cf9394a522c88f9cfb51e89f999d02fa747a0f44b730f8a07bd

  • SSDEEP

    6144:IJjLe71GZePhdjK+eq0UMs5mNI1jsHrjVNPpDaPykBX:IJjq1Gu+pUh5oPhD

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1