Extracted

• • Target
    file.exe
  • Size 311KB
  • SHA256 a0efc003baef2a6eac1a1de2f130a08f8b7fcbf9a7e1bc01063cc405520f47bf
  • MD5 9d6c2d3a5d7f158f1c22d70dbc0d857f
  • SHA1 c4d9a802648e36ae004831c8c70e3db4eeb98fc0
  • SHA512 12f7b6a00bdb13e15ac961d62fc2ed45e4efeed4f16c5e2b07cccae029ac84e7e749d83b392780460319270ae1723bfb48c7d26c2db8734d12272ad06ac6572b
  • SSDEEP 6144:fHpXYroyPpT5BdHEoPc5/0muL3lVky4PBxPwTfIpAVAt5YnkQgrN/F2zAFhtnzDi:RIkEhLBJPa0mgMzbwjIpAVgasYAPR3h8
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (tg: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2