Extracted

• • Target

    ea77f98ac85a6d8293e8609aef2e22ec8415875b3d9a4f8f136fae83d7230633

  • Size

    425KB

  • MD5

    722e84be6da07f2873ce230715432d31

  • SHA1

    b201ab3346d5ae405dc8bbf58d159e83c2d933e7

  • SHA256

    ea77f98ac85a6d8293e8609aef2e22ec8415875b3d9a4f8f136fae83d7230633

  • SHA512

    2c70b9154ecc195f4eb2f0c35195ba7d861090731ac9107fbb01032ca5856828c2771f5e371d28e6d10ce5e50d2e351275e41229ad281ea272a998a62a76d68c

  • SSDEEP

    6144:IamLvKLcSlnX/BIM66N9Ty3i6Q5Axfuw4hB7+6H:OvKASlX/NN7y3/Q5AVuvhxxH

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1