Extracted

• • Target
    file.exe
  • Size 323KB
  • SHA256 c00935c3d68d60908b67b83aba7887c4c9b214028af047f1444e2cbc4626ed87
  • MD5 35be87057266fcf1ce58be0b55a91b7c
  • SHA1 d5971af9346a39da516691ade776dec6c7493726
  • SHA512 ab518d7383d10e2c8bd46cedc21914b2b5950e269591ce8a6b4ea444d3d33e33753643c69789167efd1f8b43c7b0a694874e65719f239daf8db369bed55d2ef4
  • SSDEEP 6144:EWGQyfwGoGU0JdIluWe/iYDvb67B7B3thPL1YJsv1/ZvcZ:tGQyoYdIluWe/JDYRDPL1YC9/Zvc
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2