Extracted

• • Target

    624694f3981ee201a9b9c352a4d97f679e01ce71f5ab0bce3765db47a644c48d

  • Size

    383KB

  • MD5

    24e885c23db36ca7965733febe200755

  • SHA1

    878d50cd7ae3400aefbba0ed4a4ed7440d1b16e6

  • SHA256

    624694f3981ee201a9b9c352a4d97f679e01ce71f5ab0bce3765db47a644c48d

  • SHA512

    ef2268b461dd5075589a2f1967d2b723f8a7324f964ae39feb504705adcb6eeb42146ae764c505c6fda494a1ec70be31a232cf5259205d59035bc14570955dc2

  • SSDEEP

    6144:vO0IrLPoaQNDZ0SVx17aXpPnQpTtgdXNmDTCLMgI0p8va:m0IrLAacXx58pPnQ1ilYDeLMg13

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1