Extracted

• • Target

    e257760620e198f834e02ef37cc5161a2e64c78e825cec939089d9b7c546a33b

  • Size

    325KB

  • MD5

    6ec5c79a0d1d592bcfedfa9f8a8374ad

  • SHA1

    5d485010fd86cd85d967ca6ebc31c8cdc343b666

  • SHA256

    e257760620e198f834e02ef37cc5161a2e64c78e825cec939089d9b7c546a33b

  • SHA512

    8bcfa8da108a62c3dbbc9f8a217ddde83c170cc15a71c2cd07c49638d57ee81e2cfec3b6189aaab4f537926f044cf65da8d414eb9fec801dc4ba99df1437999b

  • SSDEEP

    6144:k7XI1J0Jg7n7QSTD+Tl9xQmqP7/tc9waZH+H6BKWaXu9mD9va:SXotQwSTmmq7tSwe3BnM

  Score

  10^/10

  redline@germanydiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2