Extracted

• • Target

    e79c13a28916ebea69f02e12964f9a8c.exe

  • Size

    243KB

  • MD5

    e79c13a28916ebea69f02e12964f9a8c

  • SHA1

    b0a0b11f5c02aacf78cf85efcfc1b2848eec22ea

  • SHA256

    5811521cf05b04befec57554827f8426ea8743bcca3c7838872d1f58e4149cbb

  • SHA512

    791e585ff93f5f4b67897dca917c810a8ff793644be9e6a821e70f69c85ad2aeacc8f4b08e63b04cdf81eaf500ce7dd40795e540208a69ed2e7e96324f92f90c

  • SSDEEP

    3072:XbGjTL3+5Pe2qFaguU9VoB90V7hEqzKwRxztCFtzr8OLbwANmz8Py5wiQ:sL3ce2qdDVy27wwR/CDrbb1mz8P3Z

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2