Extracted

• • Target

    bdc4b3996f1c14fe78c0fc598bf14ea227cc03543d132090f452f7b871172da5

  • Size

    398KB

  • MD5

    d7c72a6382b767e306a07f4087a7ac99

  • SHA1

    68d932841e5fc6b2fbc8f4312e54980c39c39b65

  • SHA256

    bdc4b3996f1c14fe78c0fc598bf14ea227cc03543d132090f452f7b871172da5

  • SHA512

    e90731788ea04b0f5befb6ab922fc3b4aa43ccf2802388d054c9da70d79112f4138d6e0f22fbc85f7a4a06d673b35c5ce1af179600dc1bd29e9a628c89acc323

  • SSDEEP

    6144:g5DLjnvJxfH5CmlA80uhK7Ri9msu/i4wflp/SVgUTWXtpFsjpIL:g5DXnvnfH5hA80biYL/Glp/aDWXtdL

  Score

  10^/10

  redlinedozkdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1