Extracted

• • Target
    57b747f1badc316a721c299f41caa3bb.exe
  • Size 585KB
  • SHA256 271dc24ce0ec9142ae5e20bf9b09d65032a87c48ad8d44d3b91c5ad2a06b2001
  • MD5 57b747f1badc316a721c299f41caa3bb
  • SHA1 c9365b7a20a41a6182445a11c80c823a7a83459b
  • SHA512 ce50148c5f390c05d425082ff4382c0a6d70aab1c4f9a39eaa1528d57bb4b171fc22de3528707de067283608ba6623b764049f0576a132815940c2bda15a3940
  • SSDEEP 12288:MMrKy90NWJD0qBzHJBRNXZFMgmSOCPNTTnms2/eLs+:2yE+rJGgOs2/ax
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedizadiscoveryinfostealerpersistencespywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2