Extracted

• • Target

    38f88f2119c82d04462c902771d27d1ec546b3d556081a6103d844add1a9af09

  • Size

    425KB

  • MD5

    dcb518ed1ed68c30a11cb79d50a0fe69

  • SHA1

    c770b74ee42bba7f1699341e8b03923b93a60789

  • SHA256

    38f88f2119c82d04462c902771d27d1ec546b3d556081a6103d844add1a9af09

  • SHA512

    69cf914141ba3d01aeaedf40da8a546aa1dbd9bcc9027018edc80a3bbbca564e45b91f62877167bd049915571bedd0542d16b34559b8c8a2b672d57be2a8479c

  • SSDEEP

    6144:CJcavfLvJ3Vx3AxSqFPt+HTUVe64wGz/wWpNV/DXqOxI:Yvf7J3Vx3AEqFPdVzpGEWpzLlI

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1