Extracted

• • Target
    file.exe
  • Size 333KB
  • SHA256 8a9e291a57a70f07a7d3b0aee7f05b8268a5af104b1bbafa571d8d662fcd66b0
  • MD5 53cd4000cd7f2474d1ccaa3c8c531720
  • SHA1 190c5bfd08a87303b4c2b1baaab50973e2f6287b
  • SHA512 715bdbfed33ed068a610df79454255adb81c1d6c2641da9bb592c812c8d62a38824386d26c2535cab2817e2ae539b69bf8ba5f83e52352551caade851bb146e0
  • SSDEEP 3072:Rm4ICQhvcJ3cxD08jdd4WFfSOCE1/6Z4Rr08RuNhxIizDCJOyXaXG6EonII/4:pkvACJd4JNy/sepuWivGzXaXG6Eon
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2