Extracted

• • Target

    4168bcb668121c9cfbfe2cfc8f5ebbaafc46b69d51a75b7c54bbdffcce49e52f

  • Size

    381KB

  • MD5

    75cdad6d99a664b7cc69945de3dd20d0

  • SHA1

    e475df28cfb87284d45f324dd4e1ecd69f56821e

  • SHA256

    4168bcb668121c9cfbfe2cfc8f5ebbaafc46b69d51a75b7c54bbdffcce49e52f

  • SHA512

    4038f770066b21ea21189ed786f43cd2b899c7f507901bb081fdcff8708308806bec3aac9c86223874a3f499f6067d4480cce84744755716560131100d10e563

  • SSDEEP

    6144:DfKed7SZsUtRuVhRGCSjvK4LRkBFRDtzIOTfm:jKed7IsAYVhRbSjvvN0LTm

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1