Extracted

• • Target

    1244-57-0x0000000002160000-0x0000000002194000-memory.dmp

  • Size

    208KB

  • MD5

    07f010cfd7e5b76af25b852d0e8d0cff

  • SHA1

    ef3cc868a4d1105c078ebf7f8262d46dbf08c68f

  • SHA256

    5157c0dbeedf0b69da38beccf067c91e29dac928c136efe52d7819dc3b4a6908

  • SHA512

    778eae6ba08ada5ef138605785ef269f09e0f9a4c33130c94bbe4ec8d375716fb30fe9a2e679c70b787ca137847419f8daa48ed192d3a8b87473493a2a1f77cb

  • SSDEEP

    3072:gzPLRuCkCBrrAuHOOxaCEflJhL+4FBKf8X3iL8e8hi:EPLRwCw+EflJh+1kX3iL

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2