Extracted

• • Target
    file.exe
  • Size 1.1MB
  • SHA256 9e3f41755858886bd7df4426cf9529c92df5891cc232f916dcd85af0afe7eae1
  • MD5 654e2409f2a1636d385c8c280394efd4
  • SHA1 e7b3549dc62e0c174f59a19361da8d3249e3bbeb
  • SHA512 e31a3bc53e8ae866d3108492cbba932376348b79b5417f7a10e893af4febef07d684fad47649b88ee2120799c228d146613d82393a99d7c8076b7ccb5e066b4b
  • SSDEEP 12288:30kDEexIP6hupW828cFxj5QFC1OvBF5aapVnueyqz5I3pI6AKEyQr:3148IP6EpW828mHCBFnpV63dQr
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)infostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2