Extracted

• • Target

    ca62fe2dbeed1715ce7d7cdb425af6a1eab6872a369ceeac94682e58add3feb7

  • Size

    580KB

  • MD5

    4bf67dff75e469a0023adb7089fbeb11

  • SHA1

    945c43ada9a7293e109cd2eeed6560ad83b58490

  • SHA256

    ca62fe2dbeed1715ce7d7cdb425af6a1eab6872a369ceeac94682e58add3feb7

  • SHA512

    633e3dda33b023d593355ec49046b3ce0b70d6f9b45948d967eacc7053124ba6f73cfbb9c9d8e55d733fc44f9cb6b17694ab144e2cfd3903c1097803ccdf46c8

  • SSDEEP

    12288:OMrey90HSvRvLmcORAW1iyF+MFcFDy2whBT61FiK6:My30cSYwstwhmFH6

  Score

  10^/10

  redlinedizadiscoveryinfostealerpersistencespywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1