Extracted

• • Target
    52b755ab6e44ea73b01a28a3b357029e.exe
  • Size 397KB
  • SHA256 6da475ac175e61bf1658bb90de341b2f9642dfcf911dbfd44885239483050e1a
  • MD5 52b755ab6e44ea73b01a28a3b357029e
  • SHA1 7c3696f5c8c1e193269e5bee11a5084b349292ba
  • SHA512 85a7871f67d3917698db8b054a2636cc262a093944543f0772255afe9f94ae61fac557245a99e00e58f336fb18fdf6392a118e0adad12334718d8e555f5a8bbf
  • SSDEEP 3072:jmGBuxhMocHW6B52SBLONzGXQcoymkW8lRiBcx3dYFlA7BRFFimA4ew1uP5H41Tg:jhgvc5GSBONEQim2QaBBXkm1dW+
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Drops file in System32 directory

  behavioral1behavioral2