Extracted

• • Target
    b040d35e2eee0cdf7c3156106271a56b621f8ca1af9d24fcb22674c6a1f29fd1.exe
  • Size 310KB
  • SHA256 b040d35e2eee0cdf7c3156106271a56b621f8ca1af9d24fcb22674c6a1f29fd1
  • MD5 2abf4a129acbe7320e56c47a8c918e34
  • SHA1 17f5f8100f012683ce241a8b79e2553bfbb0b04a
  • SHA512 3307db232f61f0159e67035abb0a323cd9b3f2cdd59c80c0e336d6be8b5c0ee5b7e625435721f8a03db4a53c6606389e4fbd9407a0437af048ccb6f60829b915
  • SSDEEP 6144:f9pH1qN/rXsuI9IaeANXnpmS98GxJ6sE7AVLMHtxV5inBlny2goYEy9H:70Nz3I9Kk3IS8M6fkNIR5yy2geKH
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (tg: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2