Extracted

• • Target

    7729dddee47a8d00dbd8be1c07fde55bcbf8e0adf6b60b9cc4b78122cb0980ac

  • Size

    383KB

  • MD5

    6ec6d4e8be7a0c3b2563c81a864e0f0e

  • SHA1

    fb7d8de7ae29251e1969f4b006a6d2303b2de52a

  • SHA256

    7729dddee47a8d00dbd8be1c07fde55bcbf8e0adf6b60b9cc4b78122cb0980ac

  • SHA512

    6e46aa60d009c537530e96fb4fe16f2fb10e7a0c9c23c2695800fccc6753ba992ab8dee73daf14eb8f391b71681eead70144b554eeb9e39aaebc66132258e947

  • SSDEEP

    6144:eBXZU8IOT7kOkDwaXfSsBu+2nNzJiiZQvEGcxpgva:CXZU8IO7SZqsBGwElbz

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1