Extracted

• • Target
    file.exe
  • Size 581KB
  • SHA256 71bcb1851ebe01fac653044ac2614c6b9bfa6db5bf804e04b7757ba1f3fee6f8
  • MD5 07c030e93757eb7f2fddac0712f5bc76
  • SHA1 ec3ad74e5d71383a0ae10ce9493698b9b4a8c55c
  • SHA512 7f021cc64e9ce1f9392e98dd844ecb9d6b3cc8fbcb2dab4b2262668140c33c11157582cf7b1425501e9b9a5875cdf3f16d00b5ac35a29f0940c9abf3ebb721be
  • SSDEEP 12288:sMr2y90OzpoMz5d9y9veDcopZjeJ8MIdWbLWrcSFhEEpN/m3va0:6yhHH9yUw4ijOr/FyM/mfa0
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedizadiscoveryinfostealerpersistencespywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2