Extracted

• • Target

    file.exe

  • Size

    354KB

  • MD5

    5b186d2922ed3a83054ecb715f5e02f6

  • SHA1

    5aad803f8771566d6cbd12f7c9cee4237e7e6d6b

  • SHA256

    462fe73759511dccf18282eeac0c584285b8e91a3a04b488b2599696b5b99500

  • SHA512

    c335c5a017d479cd4334769e31b488427cfdec6380064bda66f6b56dc76d063774c29f0506dfd6b9ac67f055f2236b7540b9fb30dfbacead379686e3648a0726

  • SSDEEP

    6144:Xr92GoLn8vUZKrylCAMG2jFCEiHTVanXj0swMib+XNRpyz+iHA:Xr0Go78vaKryMGyri5Yc6dyzDg

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2