Extracted

• • Target

    8db03fcfc72ef72f1b1e6874e9955de370572390b84d54dea7e0d1f71375dee5

  • Size

    580KB

  • MD5

    a2e08fdc84fea383a8e191f1b68d783f

  • SHA1

    8c7869f76377496d47b2cc626ca93d90310644c1

  • SHA256

    8db03fcfc72ef72f1b1e6874e9955de370572390b84d54dea7e0d1f71375dee5

  • SHA512

    41bb290a8e8bc588d401174e275b6fb03a1b4465df1aa49948a77b061c53696d53e74fcabd508eec547ae14a65cfea923b784a35c4e21276357c245e44736f42

  • SSDEEP

    12288:hMrCy90mS9uHtANh3kQJo2iAmAl8gg90WAk22TUeGvW:LypGwtSiZ7AlxzkzYC

  Score

  10^/10

  redlinedizadiscoveryinfostealerpersistencespywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1