Extracted

• • Target

    5cac216d3e5c013e3b7602d639d0069b2b357a974490ba7d95e1b4c717ed55f2

  • Size

    580KB

  • MD5

    8f7e9dfb356d6fd108092264f290076f

  • SHA1

    44b0701434742123c41b85375089528b480ec9b8

  • SHA256

    5cac216d3e5c013e3b7602d639d0069b2b357a974490ba7d95e1b4c717ed55f2

  • SHA512

    6a620b1aa8f6f0f90829cc4cc95fe0d1a2631c0a7ceaed1e5224e4a075f59e8d4840ce9d12efeea9b8707f3db745895235ed0a938f8a822011cc5268f404eee3

  • SSDEEP

    12288:7MrQy90w+w4vgpDq6LbxIqf/hjGqGuzWY05vTB2CR:vy57u6xIqnhjDGuzq5vg+

  Score

  10^/10

  redlinedizadiscoveryinfostealerpersistencespywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1