Extracted

• • Target

    80fd8879c0969e5ce0adb2c9863349a1701a7088d9844114d941b137663f69dd

  • Size

    383KB

  • MD5

    46c6d236d3e5455320030c432bde0c2d

  • SHA1

    965825f42e985085e9fb249083fe46f451d95e6f

  • SHA256

    80fd8879c0969e5ce0adb2c9863349a1701a7088d9844114d941b137663f69dd

  • SHA512

    eb36fd8b4dca6a3992b91587dc40db01e2eed2a725d041b31319e7fbf82828d97df5c25def0278240b170d2d81ad052d259196bc9fa192afdb293239e72950e9

  • SSDEEP

    6144:9NnB/RPG7d70RqOOWfFQljJk9kTPg3RcpFva:vnB/Re7F0TQl69kJs

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1