Extracted

• • Target
    file.exe
  • Size 287KB
  • SHA256 59206515a48f6fcfdf4e1ec5e8bf4ddd052a7415f86d52e39f59b15fb7e64002
  • MD5 a8aa85737340b2e85791e328c1bf037a
  • SHA1 d4a340db62a5cea41cf156b685c46fcbc6aec067
  • SHA512 b5aec21ccadc21afa3c8dd0c2121371e7c766e75f59436e4d161ca286742e18b1abe091126fc579575f47d945fd1ead0049542cb7913ded1da95ebab00e56cae
  • SSDEEP 3072:XE59rF74OHAIZPIejA7EXphrKKgQDOpOUSOmLs/QjBoPrumkZj/Suc5Hpeh9MwBN:05ZFURISFodKKk5QFoXkZDSNdc+
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2