Extracted

• • Target

    48e338527bc55244c3f5daf4d9f8642a223c37fabd6573d56b93f4acca34284b

  • Size

    355KB

  • MD5

    bd76545d0f45d2f554da650cc6057f35

  • SHA1

    15932a305729a231a13e110c8fdb536d301ea6a0

  • SHA256

    48e338527bc55244c3f5daf4d9f8642a223c37fabd6573d56b93f4acca34284b

  • SHA512

    d7cb418ee94e7a306c360dbb1e4cb0f1663d54954a7bee2ff29fe971db97761aeaad7c0776dda021e5a85f9ad2639f53b1daeb01acf16490a1bb7cce20be2cdf

  • SSDEEP

    6144:Kd6Wsbr8F58d+LdHV19fV3yrNhiMuzQuWfCVP:06Ws6qeHv33yrNhzuz0

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1