Extracted

• • Target

    76ce644d809a57af58cedaeeaa15eba338196b5de91053d9f694327983ae2b5d

  • Size

    284KB

  • MD5

    9edbff8be47a72a02f8590697a7a8d5a

  • SHA1

    451d1589e996128b29234541e382fadfd4055bd3

  • SHA256

    76ce644d809a57af58cedaeeaa15eba338196b5de91053d9f694327983ae2b5d

  • SHA512

    fecde17deb878d6eae8f5656856b42910c44185c80b53371d3062e0aeae465e766274e2ed8db4d69d3b1448060f0a79b6921f02ff42bb07fe23ced47b7406025

  • SSDEEP

    3072:h/Qq07+abzWek8xMB0zYLd64e12gZiuHQd0aSiYfUbhk0m5EIq6eBXJaG3w1jzpQ:d0KwxMnMZw0HiYfUtkZ5EIMB+1SgA

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1