Extracted

• • Target

    6d6be71b6cdc81a5dfe0ac14628657edbd3e2b3b4255d2d7848cfd8c1ffbf984.exe

  • Size

    277KB

  • MD5

    1b092c17d5f337e854e6ec4486edfa15

  • SHA1

    81fe445b6571f629741c410199b396797a0a5305

  • SHA256

    6d6be71b6cdc81a5dfe0ac14628657edbd3e2b3b4255d2d7848cfd8c1ffbf984

  • SHA512

    75330553c63b759cedf6d86fada690b9014b97e5cb3a5ad2e33b26617c81eaf63b2ed7979d94cd1f6c7107085054b554cc3886beb0301c902eef73e5e23c05de

  • SSDEEP

    3072:uF7UL9btw2736ln3CFqvJph0oCG2L9QyJwrZRufXmaot2rI3Ivdv9pD5l8H4ypnE:awL9byQ36ZRvJH0B5L+yjEYvdVp8TnE

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2