Extracted

• • Target

    fb04716bdfed0ba9c44f275fa2c1b180f754659f11eaa2b63fcc615457f6f896

  • Size

    345KB

  • MD5

    d144b5d043c4f938062e75b4c92d6ec4

  • SHA1

    cd34a21be7306432b29795246aaac49e0a3fca5f

  • SHA256

    fb04716bdfed0ba9c44f275fa2c1b180f754659f11eaa2b63fcc615457f6f896

  • SHA512

    3410a5a859a1596633c3b5a0e1a47e3714e0e60aff54b9c9d7d4b719ab6bf6eec46483ff32ac2f5ebae0de9ac65fb3d1620d0d34bb5350621d6a05d6b595682d

  • SSDEEP

    6144:NCqSsz/+LCwGGaho+kMJYPvr1GhxgbSMulN0jeyZVGp:SszWmwTYqMaPvRBSMulSK4m

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1