Extracted

• • Target

    7aaf04040e8a288cdda12125c8e8c601220ec6480bba4822a136f4095c37a4ba.exe

  • Size

    380KB

  • MD5

    d680bba3d9207b75f696767d029439b4

  • SHA1

    8e21bda97791d6ce539c36bedee296467a42eeba

  • SHA256

    7aaf04040e8a288cdda12125c8e8c601220ec6480bba4822a136f4095c37a4ba

  • SHA512

    243e036d2c9bf1f844571ee85c5bb8f3c89d6bf3299baf8be7b53afa5d078e8780fe2e5db5c5fb3eb549b259b903436c5ba95dc680ce2fe9753f26b29c4df87d

  • SSDEEP

    6144:rGbKYa3qCQvmWzgMWc2L/555sOqc8igD+D0+clP96FOc/VUNN4T:rGbKR3qFO4Wc2tIcDgLEUN

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2