Extracted

• • Target
    02745199.exe
  • Size 853KB
  • SHA256 3d692603d526a30bcd3d5a4fbcb5f8efb7103141ae836df545f8d97b1da355fb
  • MD5 3c55ebbb45bcda9f5661f1de796e4df9
  • SHA1 3f02782cc337651adb82e62bb6eb5df7dda14fb3
  • SHA512 ffce870d6213dc72be443d73951b6aa6ba6414bbd1170d1ad68e9c0c16ddc4816f4ac7acb2703bf561cb77886437d30d490248538150362d7a8469bd829375a3
  • SSDEEP 12288:uMr0y903ANob7Atw4cJ7cuACeUKpxX9OibZWoHS1yfO5uv7GrFxNy6ua9CprMBCV:+y3MAtw4ceuACsNO4fWEGLbuGCWMqG
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelupadiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2