Extracted

• • Target
    4fd73b97e5cafadfd9e180ebab390001.exe
  • Size 585KB
  • SHA256 c612fffc0085b0aa52db0740bf0414806671a08d68e1fd0e755928af886a26a9
  • MD5 4fd73b97e5cafadfd9e180ebab390001
  • SHA1 8d0aa05d90c6d1fb87a006d0139a62e9766861fc
  • SHA512 01b269b3806a97f5705a8abf8ad61809fabd5a8311ef431c937eec5dd6112b11a747ebffdb3bf6b23f244639b9f8737ccd7edcead01a0f20ed3731af02a219c7
  • SSDEEP 12288:ZMrmy906d/ZtJ2AOqOD0Acf2tWIPgZXPyaC5+BYruKqgpd:Dy5Pz2gORcf24OgKH+BJzU
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinedizadiscoveryinfostealerpersistencespywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2