Extracted

• • Target

    e4bb056a390bf88d2e2b2f578b5a4cbb6b4eb9d19a8f7998642bd46585bd99ec.exe

  • Size

    311KB

  • MD5

    b3a1f805a823c5914357520277cdc42b

  • SHA1

    d08444db1f7ac21e0ef9e11afbcf61adcf1da7e9

  • SHA256

    e4bb056a390bf88d2e2b2f578b5a4cbb6b4eb9d19a8f7998642bd46585bd99ec

  • SHA512

    e148e4749556c809df2cbef3864530192d3eb975d4dfef62e15df7c743fe3a73b4c10adfbed43e9cb19142f6c5ed4a6fbb173c9de6af3d56e87b59ccb323b7b7

  • SSDEEP

    3072:QpXrKszh70BmVK07RhGBjDO29bLS+G5A3G7EHpdiw4dFZil5m9VZwR1zahPTET:ybKszqOKxj1vQAWaypFZ39AjgPTE

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2