Extracted

• • Target

    f920c96551fbbbcce3ab8b33fcfc514e5198496486b698904f107ebd57722f05

  • Size

    392KB

  • MD5

    659ea61aad1c349c4193850f9a51641b

  • SHA1

    0d1e8703053d180f2e415dc5923377bfe3478583

  • SHA256

    f920c96551fbbbcce3ab8b33fcfc514e5198496486b698904f107ebd57722f05

  • SHA512

    3542acd10fc45932d080652c874602c759e4e9dc98ef10c264513422ecb42f1493a40ea6ee9619929ff49071aa03edc75ebfaabfaa64b6f5d8222ad572b4fafd

  • SSDEEP

    12288:OJ0/ZFbqZnBvUp2/OdTN/5V652IQvHbu:guqxBvUEcpuQD

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1