Extracted

• • Target

    75cc8e8f5aaadc73e0f79c92a09a68d6a0cfd824928198776158ea591eb40405

  • Size

    379KB

  • MD5

    44a0ad3e5c6e02e553d379dd6a178b56

  • SHA1

    bbdf133728bb569536d8979881161a91775d2a06

  • SHA256

    75cc8e8f5aaadc73e0f79c92a09a68d6a0cfd824928198776158ea591eb40405

  • SHA512

    032206b7f49d6b9150ee2c866bc76fbc1dcbdd6857d892e072c42cdf040f567de528ce265b2fd153f507975ca672c1d39edbff5b5188bc95dc8144e71d1e2ae2

  • SSDEEP

    6144:YxAQHcMSKAHgKzXzMJZVqBV0IsfVR6mrTfz:YxA3MHAjzXe+vvstXz

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1