Extracted

• • Target

    5aa962acdee0fc20b0f957e4001447c4fe6bcd0b28c7db199eb2c7ab3804804d

  • Size

    291KB

  • MD5

    9071e5c365baf5a5645fe90844082681

  • SHA1

    e11ba7238e60469867541f60a466277ad982827d

  • SHA256

    5aa962acdee0fc20b0f957e4001447c4fe6bcd0b28c7db199eb2c7ab3804804d

  • SHA512

    9b4751d032ed968fba88c4902c8bae04f93a50c2cbdd86365a0612e1e5ab8e5baa76c4fcc2d9bf0eaf8c6c3ec641449e1d27c59c24753dedd4587d3c1b3d1974

  • SSDEEP

    6144:WveKNz1oLWtk5xBi0u9AH1euPOX6SbUO6FR:C9ohLi0o0eulSIO63

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1