Extracted

• • Target

    c3750bb1c161ff86f6c5cf35ff827fd8fc1000dfbdb9ff162a61463632d997cf

  • Size

    376KB

  • MD5

    8c6fa09cadae7b0c3769d4072ad1f8ba

  • SHA1

    737413139bf9428c663ad9d15cef7520b2643aef

  • SHA256

    c3750bb1c161ff86f6c5cf35ff827fd8fc1000dfbdb9ff162a61463632d997cf

  • SHA512

    e969820187bb26e55f0f4f8a5acd19f0c7ecc76d29b429f0f854055bec0e9d87a3867fd1a763b5c169a7368626bcdd4206b96585bef12518b94771741ab146af

  • SSDEEP

    6144:0bS8e9r9P0RWQLfDqGR/+WwI1AxvAWHNzz1BHI80X:0bS8e9hP0UuDqGR/+W11AlFHNzx510X

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1