Extracted

• • Target

    442c4e044742c28863110145a69c9fb3f6d5bbaa38781cd1fb66523b62bcc2d3

  • Size

    379KB

  • MD5

    48bc9a7f1aca651d60aeeb568a8ddee0

  • SHA1

    4a8dd96f8054992dc814748b6f4a5e4ac25982bd

  • SHA256

    442c4e044742c28863110145a69c9fb3f6d5bbaa38781cd1fb66523b62bcc2d3

  • SHA512

    2ceb8e6f696f8443cf6762f5f37b686f69294f4831f1425bc91c15294f482d5a37b20567bc2eb831924955d896cf458a732161e28b7ccfa834616579fef0b9a8

  • SSDEEP

    6144:4DC8WmYQJz7Tet8fmCLLeXetitB5Htzoz7Wc+JWNPckqlgmpRN/INN4T:GC8WVQJTetMmCveXetaB5HthtWNYFpIN

  Score

  10^/10

  redlinekoreamondiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1