Extracted

• • Target
    file.exe
  • Size 581KB
  • SHA256 a60c8cb5d8737d96445ebda7f8c5fbb445d78f77758e728c0b25b89e11538cc9
  • MD5 8259a24718f2e8004e1b92c29a88a909
  • SHA1 3c255d094f53907a6d21c5ed1d33875722852e67
  • SHA512 39631047a7161379f9a6a1a17ce5eeb63a3f6303946e2dff7d3f49cc93d60bf03884ad923c31e528945220f16b2d8587fa0960f897a75025f42cbad4ae1762ba
  • SSDEEP 6144:KWy+bnr+Dp0yN90QE1E7pteKJ9U1Q/xh1Zi5vc1JKaE3aRG9SUNA/lqo7dTeAIo0:WMrfy90c7aKJ3RyUXTv09SUq55FNVrY
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedizadiscoveryinfostealerpersistencespywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2