Extracted

• • Target
    c60d9ba2aa0ba62b183d1de46835af7f43953391b33145267814489d7893230b
  • Size 322KB
  • SHA256 c60d9ba2aa0ba62b183d1de46835af7f43953391b33145267814489d7893230b
  • MD5 0111a6173931e73350f12c56d3a4192d
  • SHA1 567e583666e5ab467b5e1d6b740e1344dfe2b88e
  • SHA512 1ce113adba6affa641c30338c492a060c79176eb03d0b7083b64d68f640437c2bb0252dcc7cc30f454f14078f895fdacc602baeef4048b543d3ffc9fefa8dec2
  • SSDEEP 6144:Vtn4Y664lsaqm+PHIAaZaPpyLb0Cr6UaGzHdxADXio8EO:Vd4YKlqXPyZaPpW4Cr6UaGTADyHEO
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (tg: @logsdillabot)credential_accessdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2