Extracted

• • Target
    file.exe
  • Size 277KB
  • SHA256 6d6be71b6cdc81a5dfe0ac14628657edbd3e2b3b4255d2d7848cfd8c1ffbf984
  • MD5 1b092c17d5f337e854e6ec4486edfa15
  • SHA1 81fe445b6571f629741c410199b396797a0a5305
  • SHA512 75330553c63b759cedf6d86fada690b9014b97e5cb3a5ad2e33b26617c81eaf63b2ed7979d94cd1f6c7107085054b554cc3886beb0301c902eef73e5e23c05de
  • SSDEEP 3072:uF7UL9btw2736ln3CFqvJph0oCG2L9QyJwrZRufXmaot2rI3Ivdv9pD5l8H4ypnE:awL9byQ36ZRvJH0B5L+yjEYvdVp8TnE
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2