Extracted

• • Target
    file.exe
  • Size 347KB
  • SHA256 e7c9c79948e5fca5447d4dde753f80ac4c7345361b9556aa0dfea061bdbbd94d
  • MD5 e4e2779dcccc9834770a960d1e6d06fe
  • SHA1 2bccac65737fcc34674e4054483bf22eaa724dd0
  • SHA512 f758b41f3b319026e00a10f87690edd3ca251b75dfe8f7b07fcf6959209172b145ef4086b2a045bc24156b7e455ea332850147ec8963e3a6772cf5e01f60639d
  • SSDEEP 6144:tsx5dRRdRYMDI+HkC3q0jhEejvk3pnAx4t+kIJos3UY7MZ:t65dRRdCl+HkC/rjQpnAx4tfIJH3HY
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2