Extracted

• • Target

    e34f83d92970921642c2da6840834638acb55b57e9e181e404b32d7aacdb3308

  • Size

    361KB

  • MD5

    c771262df07a6f495e57e9bba56d107a

  • SHA1

    9f4fba385b43b4dfb9b6ad9cea16021d704119db

  • SHA256

    e34f83d92970921642c2da6840834638acb55b57e9e181e404b32d7aacdb3308

  • SHA512

    b3e81efb0c2dd6a548c0c4c15e2e7621025a95096aab520eb783ff1e8b9c29928258a0ac6b4a41ef11dcc450f3a03f9194782e098e241ef7cd10fc51ed2bb8b1

  • SSDEEP

    6144:wlaVDOWLfzXT3OIolUi6aQ6lKmnsSAeCWWgPGNOgxe:q5WbzXqRKHbmuWWg+NOgU

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1