Extracted

• • Target

    63b74497d23e33b7a946526d5db7440acd9154413338c2bcf92e52f35a03a423

  • Size

    375KB

  • MD5

    9f2a6662520f755765a26a70cd1676b3

  • SHA1

    830c490ee7a8f30a1aa4335ba82d8edeebc3e394

  • SHA256

    63b74497d23e33b7a946526d5db7440acd9154413338c2bcf92e52f35a03a423

  • SHA512

    32a0bb9a48fb5ab23f553e45dc54acb2124389452af762008b7262de2fc9cf9890cc4b7e7666947544557b32346b822c28aaa57e7a3c05af645eabe15b522659

  • SSDEEP

    6144:dIa0hNMVrUWbdUoigQfYfEAPJjiUZtd0PSnSHAMYmQRfM:dIa0hNWrUYEQEAPJj9d0SnSjJQO

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1