Extracted

• • Target

    466af816439ad56ba0409e48b918f6efcdf8f6a377525c7e3a9f5451f50510f3

  • Size

    340KB

  • MD5

    6d08bae20e2e1f44c00f9333086f6e7d

  • SHA1

    a6053d79a558a93dd4e56629e549c2bca488b301

  • SHA256

    466af816439ad56ba0409e48b918f6efcdf8f6a377525c7e3a9f5451f50510f3

  • SHA512

    9067c80032e9c15ad871f6e0076f3ad43eebf8061e0822c30712ce01cdd5acfea94de60fa0a907c6c4697db0a315e8b46e49cbc33488967168f085fd50e48091

  • SSDEEP

    6144:qjSLLU6sLt2Mqd4qrqJwyNrwTQwniT7xQQpa9V30:tL9sLuqJ3rw9ihu9V

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1