Extracted

• • Target
    file.exe
  • Size 507KB
  • SHA256 ff135242e85af66cecc8c8b7edada3d4c8abca12461a62465ee376e3ce3512e9
  • MD5 3b0d2cceaf587b5f1b1f22039c58c0d6
  • SHA1 a58808af8ebc59b1a41bd4d63dcecfc856462474
  • SHA512 9f3da0808292e3d7d3777d48420c39b868e8a5e79d398d21fab0001b8ca024cf7f5f0e57fed6e8622a2805a47dc8998ea26d48605e88189b259d30534c4f9828
  • SSDEEP 12288:jSk1ulPlXMDLBk1okWqjzwazUJM9H8cWyHGP:jSjJ1cizbB9Hi6GP
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2