Extracted

• • Target
    file.exe
  • Size 417KB
  • SHA256 ace69ec865ded98976cddfe028ed70b5fa60a0fd5c01f1996ed160ecd3d5c859
  • MD5 41daa24b9867f03de306d5daaf63d0d9
  • SHA1 94b87c30fe89f24c784ec28eff61ee7bde7dbbf7
  • SHA512 aaa48735531dbe081e0d512d9f11c32a3ae76d30eb561e3c650a70d30406e7279f879532759cd4e53b857e76296b718d131e68b361d69afcee96a41c52d00912
  • SSDEEP 6144:7Rw2JV8O2v9YxeloPqAAfuyu/IsmvrHHbFv7C:m2JVvelozKuyu/IBL7Fv
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2