Extracted

• • Target

    d9b50f69274ac3bfbd91fa1db68b247ec6bd98d34398cc5bf292931efca603b5

  • Size

    430KB

  • MD5

    c612eb41d82a6036d9e9986c17e09c36

  • SHA1

    9aa2083cfd833c31eab0977c9479d483237206fc

  • SHA256

    d9b50f69274ac3bfbd91fa1db68b247ec6bd98d34398cc5bf292931efca603b5

  • SHA512

    cb62f15c965fdc3127d0e78c591c8e31fe0904a3d4d1195d98ff289b036971698c40cf8336dc8e0c8dcb621264f528cff1765a07225cc42734c5a7b6f8ab93e9

  • SSDEEP

    6144:QtCsV9e7WiZZg4/WuNrdfZtNtZu4CW5Kxqz7hbi:QQsV9e735NztNt0E5KxqM

  Score

  10^/10

  redline@chicagodiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1