Extracted

• • Target

    931550f6442765e288034980250788695e5e57bc2ec44b1a09fd6115fb5a1e29.exe

  • Size

    380KB

  • MD5

    6ac746b33d45f3a5389023fa3aa38a40

  • SHA1

    ed149f7728ffb1cfaa6b9884522647dad1dd261b

  • SHA256

    931550f6442765e288034980250788695e5e57bc2ec44b1a09fd6115fb5a1e29

  • SHA512

    dff49074f5b26182060eaecf257189a2c4cfca37295f4150fde8a3465ebcb58283cb1f768a0f6793668deaa1e9bd66bfeaf9a926ae85771f10739fbe850d0093

  • SSDEEP

    6144:qRnxyU+DIM5nSAy6YbWYYo4zsxDOdu6Q0KgT8S/ANN4T:qRnxt+Ddt49tvOrlT2N

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2