Extracted

• • Target

    d131bab4a6aee2cc165db9ae8293f3b5f3c1c1f50bab54b5a9ec284ae9b4e2d6

  • Size

    341KB

  • MD5

    97bec5707f428f9ccfb8fc61dcb51931

  • SHA1

    45acc876fe64bd4e74bb287dbe894365847c0633

  • SHA256

    d131bab4a6aee2cc165db9ae8293f3b5f3c1c1f50bab54b5a9ec284ae9b4e2d6

  • SHA512

    fe7bcb8bc09fff8d75d3b736a473307e6ebd38882c928e7658d6e34fa4d4da1beacd3c89096eebdf48fb24638de4fad92c95abd2844582119306307402256bd9

  • SSDEEP

    6144:HseOLvTsnkX+WTotenlqvljCV6CyzcAkVQ3+Ae2ixnK:fOEnC+WUW6lOV6TzcAk68

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1