Extracted

• • Target

    0dc6a46918b8a7658b8dcfd8783919d7e5e7bd19b13bf099d2c0afaa232c70e2

  • Size

    362KB

  • MD5

    8b88d62dac1842bce5d422344cfd031f

  • SHA1

    a72ef492a91de498e4ab43a85ed2ec07fb5ba9db

  • SHA256

    0dc6a46918b8a7658b8dcfd8783919d7e5e7bd19b13bf099d2c0afaa232c70e2

  • SHA512

    7cc313eb9edf895faafef67154dd06fb8cba173e24bf647cf9e83429d4421704be044a225a175c3ed0ac377dfaaa0622b0eb00a6a9e827d5fd5dbc7928b8d783

  • SSDEEP

    6144:eg9lGJwT0L8c9TrRPh6PTop+DeyZIc08iySVBKbDFjb:9eyT0oa6PT1S5F3aH

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1