Extracted

• • Target

    c5ba98fe888c40de87f7a1930bc0f13f6ae1deee6c53e03271fd5c249980567f

  • Size

    375KB

  • MD5

    4a9ad4feb6546809785907ac211a982e

  • SHA1

    0b9878bfe92b010b38413b4ead9247e4aeebff9c

  • SHA256

    c5ba98fe888c40de87f7a1930bc0f13f6ae1deee6c53e03271fd5c249980567f

  • SHA512

    773d123357280dcd8bb0342a9d3291f1f69e5fdb280f296503bcb45854fb9683de52f1fab87d787ecd279392eada0b6a99eb3b327575d61d888080574a59cb5d

  • SSDEEP

    6144:n6vsrNKpoCpLre4MlFnzdJRfq3qpAS8LgJxqyYTphz/:n6sZK+CNrlMlFnzOZbLgfdYT3/

  Score

  10^/10

  redlinekoreamondiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1