Extracted

• • Target
    file
  • Size 310KB
  • SHA256 e59d68eb85836c929b3a7d5363236be9c7769cea3a027422ef3647f036123bfd
  • MD5 7187c7b219c1ff599f42127a6d81faa7
  • SHA1 db1632de9e2b9f0061eabe369d24428efd568990
  • SHA512 54c009bac05620a44c7503b2d792809545c97411b29d1b0279bce45ce2c6143bca161ba36083602d6c2e77152f0f94730578f4ec9bd4e1ba1acd0843482ac6f2
  • SSDEEP 6144:OrKlraWQB+m2TqmKgYp61QEDEHUhEyj4Wsi8z8/y+D0CbwRZsEE/5VPXJ:R72jmKgYprEDSUCy89Uqm0CSZsLXPX
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (tg: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2