Extracted

• • Target

    5db8dc79f4fa9561a4166846692fe825f84bff4b3235f527b47aef1a54104d17

  • Size

    341KB

  • MD5

    45913dcfe40de4107748379f1d30a637

  • SHA1

    c46430975098492ba5471653ebe1d09cf317f533

  • SHA256

    5db8dc79f4fa9561a4166846692fe825f84bff4b3235f527b47aef1a54104d17

  • SHA512

    aba24b7daccb28891b1d850248d7b917c75c6e0d599333094281f2fdaa8cd7289958adfde9459b79659cb05eee71f49a7f4565bb150331c78048ece2d3dcb73f

  • SSDEEP

    6144:0WoLc606BWfzAxQWmKUxciwpLD+MHhJzdbq+O:zoR0nfzrciCDtBnbq

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1