Extracted

• • Target

    b1bdbbb118b43102a3d25852e4277b26670af94d2b165b7c9618d3b8a5886b51

  • Size

    361KB

  • MD5

    5cfb0c681086edd3c004f1c09926aef2

  • SHA1

    f48a5e0cc2d7f21fed2455e8a5a39ab2eba98907

  • SHA256

    b1bdbbb118b43102a3d25852e4277b26670af94d2b165b7c9618d3b8a5886b51

  • SHA512

    d4d17cfadaa593231d051e2e3bf8fdda353ca765c182c417674e273e9d0f7a592783b411b04360c4600409bd1b0586e8b79eabc40934cb74d034404ab4d37cc5

  • SSDEEP

    6144:ok5yEwbyL8tO3on2QzeOELQJdUqMVw9p2lMaZtP0QDoh0V:dmbyotOe3R+qMVGorZtP9p

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1