Extracted

• • Target
    file.exe
  • Size 353KB
  • SHA256 4ad18e97811de81cfe2a3051d49ccc86cdd6bc03db21081edbcdfbadd68e58b3
  • MD5 88862a7d2f23f62556c9f4a8f26ec5e1
  • SHA1 600e11c64f9f95272bf885f836985fa6506971c7
  • SHA512 fec9741fe99afb1129a1d7fd909728290f27348eec289785f75a8217fc4ca0a8c691c8d1b110f0d3694435f180ccde490853d2144ad651290c5414ec877ce69d
  • SSDEEP 6144:Jxii46wE3w54S+phvkHX/s6Y7Jn2vklfaYMXli7RWhENTY7MZ:Dii4L8+4eHX/sr7Jn2vkYYt7VSY
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2