Extracted

• • Target
    1f2fe6b3f3ec22a8c06aef1130b657f16524bd56003b53e453cac58cec91bc16.exe
  • Size 933KB
  • SHA256 1f2fe6b3f3ec22a8c06aef1130b657f16524bd56003b53e453cac58cec91bc16
  • MD5 b0705df3198332a987f4b56a91f04d95
  • SHA1 7e2e7efb46febc0fd7c836869fa14a266623c95a
  • SHA512 46ad8e1712004c11eb62b748b042b31763972883e687bf48ee3b35c70a9eb66eb7ba77f47b53a23150c1d17701c378100033caf611b8c3b31a917eab64f20591
  • SSDEEP 24576:79xNAyNCBPzGOQhAcFovhDYmy6MmpwTwWLmJtxeYiwSpOmR1/K:79TCpGOQhAcivhDYswTPCJtxeYUf1/K
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (tg: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2