Extracted

• • Target

    d8b749cb322160fe7493300668983494.exe

  • Size

    370KB

  • MD5

    d8b749cb322160fe7493300668983494

  • SHA1

    6e2c7f760f0a8c8809f51d77fecfd9e6b8adecde

  • SHA256

    78a80da889fb77e1536903aa1d2abef676b1663c0cdff25dc03f16254ea2168e

  • SHA512

    973343565997b0fe56484bfb0463097750b94b71f173d238c7d778aa153a2784547802d24f4f196cf2fb53481410116a48ab340a589ae50b9573c0a74dc47b81

  • SSDEEP

    6144:iTQMLxiCEeIu1w2KvbOgc/PXm7iNJQqU2O4A8/N60S:iMMtn1wJbOgEuUQqU2O4z/U0S

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2