Extracted

• • Target

    e58d70e04e07a6a24a98ba9499f3f02058ae027909bdaf1f5ae360fe0c8b959b

  • Size

    354KB

  • MD5

    b9e9ec280c15c460065122e53b6d522a

  • SHA1

    8fa5bf94b0de16718b83f30112dca411ac5f23ac

  • SHA256

    e58d70e04e07a6a24a98ba9499f3f02058ae027909bdaf1f5ae360fe0c8b959b

  • SHA512

    9270e53330d4e05f23110bb481b8bdfbb81de0f08b2c64f3d2560d61df9c6933aeacb4ec6de9139d1a4ebb9e162518c6d42963ba904f9a198ee8f5c38c1805f4

  • SSDEEP

    6144:FpmUdN3N1Y1DZckBxzg9GlSuAapU5mXIdj4CoxOdL0JUNED:jmUdN3gRBJg9oSunp6aojB/dLTED

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1