Extracted

• • Target

    9d06b595bf83c9637e8f21090f6aadb4853b9939fadb933050c716f02729bf8b

  • Size

    397KB

  • MD5

    590854bab62eb9a7742555808390c750

  • SHA1

    6d8733daffcbba8faca741536f93d1bc2c710e81

  • SHA256

    9d06b595bf83c9637e8f21090f6aadb4853b9939fadb933050c716f02729bf8b

  • SHA512

    e8e11644cf1c7b4d9e068f10bc26e7ad24c8a56ec4f5f1c3989e8ff9b0024edbf2fd69c084e92510f7894b37ed485cb5eac028644be3526e37c043b9e99b2093

  • SSDEEP

    6144:N+XLKK+OpiKRlTUQcbr5zHNJrRQH+EM4NKJpWTkO7IMh/:N+XWsUKzTQVtrpEM4NKEtMMh

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1