Extracted

• • Target
    file.exe
  • Size 401KB
  • SHA256 fd84fb6d3f652320b03c3b4b63529d6d80967949f95613067c45d64b93de7be7
  • MD5 95bc30cf058fafef3b3440e15e26b5b9
  • SHA1 3f0bb9bef3d30d6de706af1a48ca004d0f9275fe
  • SHA512 03f5e3b996735999aa64e5ff521eaff516241d133f6f77f573bd517d3e72b93bc851ef0414c06d0ccdfeef0a2297b702e5a9fdbea92e898147343b0eed4a6308
  • SSDEEP 6144:gnjufNTCSimbmfBzhAuCA6wdfu4K5QFmLYn0PvfFPxpFJQ:gnaTCQ6DTD6WW41rIv9xpFJQ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2