Extracted

• • Target
    b3a1f805a823c5914357520277cdc42b.exe
  • Size 311KB
  • SHA256 e4bb056a390bf88d2e2b2f578b5a4cbb6b4eb9d19a8f7998642bd46585bd99ec
  • MD5 b3a1f805a823c5914357520277cdc42b
  • SHA1 d08444db1f7ac21e0ef9e11afbcf61adcf1da7e9
  • SHA512 e148e4749556c809df2cbef3864530192d3eb975d4dfef62e15df7c743fe3a73b4c10adfbed43e9cb19142f6c5ed4a6fbb173c9de6af3d56e87b59ccb323b7b7
  • SSDEEP 3072:QpXrKszh70BmVK07RhGBjDO29bLS+G5A3G7EHpdiw4dFZil5m9VZwR1zahPTET:ybKszqOKxj1vQAWaypFZ39AjgPTE
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2