Extracted

• • Target
    8bb664eabc38ffd53505f7e7b072a662.exe
  • Size 338KB
  • SHA256 5f1c7c05ef502fa4b2bb54351f0ae38a73d25d728e2aa370e739cced90aefb04
  • MD5 8bb664eabc38ffd53505f7e7b072a662
  • SHA1 ae84a9b0571b339dd74178dd2b5498421d9ad5e7
  • SHA512 e6eacf4bdf2d6942d89d2c75fd5874a5ff1871beb139ab250d029c7da830b286ef80776fb3cf8f4e41c7eb3cac405d4591f8df85b30db7be9e7acf5937f5f987
  • SSDEEP 6144:35BD31XA/l/qyl38yBOoqNLvxBc4pZ/IobPd:JBDBulBl38akvPHvb
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinelogsdiller cloud (telegram: @logsdillabot)discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2