Extracted

• • Target
    c86be0608ca0a4b00158a845db672d6c.exe
  • Size 402KB
  • SHA256 d7876da2f3ee12e4ae320e63b19ea683ac2f2f149add5df44daa876d3988e1c4
  • MD5 c86be0608ca0a4b00158a845db672d6c
  • SHA1 ffe713b1baa73ca65e7c2a9b88b471f715308526
  • SHA512 1c8b3ed28f3a28f60507cfe24425cfcc6d062e1ea2d1aeb6ca0f55d43f9eb88fb59543bdbe8a3ea26e1527aa3fd62e939552984ab11ceaa4630c8b898269640c
  • SSDEEP 6144:5HllgV77zjFlc/GcI8Xd8vnX+OqO74VQGjbWCfIewt0HNRCrMXsLcH:5Hllw7zjFlWGclQOn1VQsbZRwtERBXq
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2