Extracted

• • Target
    96b5ad76adbcdbd8794fc6ba8209ffdda1815304eda98e5b6d12d2aee2ff0051.exe
  • Size 529KB
  • SHA256 96b5ad76adbcdbd8794fc6ba8209ffdda1815304eda98e5b6d12d2aee2ff0051
  • MD5 2744d7db053b360960c30d91dc2169be
  • SHA1 651c8951eb3103c420deafb716d144aa5d6b740b
  • SHA512 35606d7663513f8bc337765112b64098e3b1b9d94b9ceb609688fd0ecd9bcd3a13784df7d5d67e098c71e45df0e6eaf7d547a474bfaeda80b885ec3848f928e0
  • SSDEEP 12288:7EDxEHsV7W60LIEnIV61jdfQrgjRvxBBlyLQJ70XsOT8e8JZ:4DaMVqMrgj7lyi4XsOoea
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (tg: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2