Extracted

• • Target

    46adb9cc87dcf57ea57103c9f6b27e1d28af5afe9d0b376df55aed4bf0d4e9fe

  • Size

    314KB

  • MD5

    a4063e78d402dd4e016426e18fe01449

  • SHA1

    26e7edfb8c8e55009cfd31b66731f50b693305bb

  • SHA256

    46adb9cc87dcf57ea57103c9f6b27e1d28af5afe9d0b376df55aed4bf0d4e9fe

  • SHA512

    bca5c3cc286f41c668a89d55ec763ca10315a18328eb0b46ab1cb33b20b8a4c96b2742168c31c49b31777b67f19113230c4c223e9e1d02de63aa5505dc250cbd

  • SSDEEP

    3072:ybytbtoKPPdPmS+r6/s1DgV5+1K9OErTv4OvOvaJEO9Hm1tC7lRrnYyx7tUvGeNW:Si9uSG6O2Pv42OvL2BCV2WzmxP

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1