redline_like_stealer

RedlineLike Stealer

RedLine extended-block log variants. UserInformation.txt files emitting the canonical Redline Operation System: typo together with the panel's identity, locale, and hardware fields. Several Telegram-based affiliate channels rebrand the same RedLine builder with custom banners (DARKSIDE, ZAPLINE, and similar) while keeping the underlying field layout intact.

Also known as: redline, redline-extended

Variants observed: 72 Top attribution confidence: unknown

Targets

• Browser saved credentials (Chromium and Gecko families)
• Browser cookies and session storage
• Crypto-wallet desktop clients
• FTP and SSH client configs
• Discord and Telegram session tokens

Variants

cystack_072c723f

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Domain Name, Graphics card, IP, Installed RAM, Integrity, MachineID, Operation System, Processor, Product Key, System Language, TimeZone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

***********************************************
*         _   _   _   _   _   _   _           *
*        / \ / \ / \ / \ / \ / \ / \          *
*       ( O | T | T | O | M | A | N )         *
*        \_/ \_/ \_/ \_/ \_/ \_/ \_/          *
*                                             *
*  Telegram : <url>  *
***********************************************

  >=>>=>   >==>    >=>       >>       >===>>=====>     >=>    >=>    >=>          >>               
>=>    >=> >> >=>  >=>      >>=>           >=>      >=>   >=> >=>    >=>        >=>>=>             
 >=>       >=> >=> >=>     >> >=>          >=>     >=>        >=>    >=>       >=>                 
   >=>     >=>  >=>>=>    >=>  >=>         >=>     >=>        >=====>>=>        >==>               
      >=>  >=>   > >=>   >=====>>=>        >=>     >=>        >=>    >=>       >=>                 
>=>    >=> >=>    >>=>  >=>      >=>       >=>      >=>   >=> >=>    >=>        >=>>=>             
  >=>>=>   >=>     >=> >=>        >=>      >=>        >===>   >=>    >=>          >>               
                                                                                                   
>=>    >=> >=>     >=> >=>>=>                                                                      
>=>    >=> >=>     >=> >>   >=>                                                                    
>=>    >=> >=>     >=> >>    >=>                                                                   
>=====>>=> >=>     >=> >==>>=>                                                                     
>=>    >=> >=>     >=> >>    >=>                                                                   
>=>    >=> >=>     >=> >>     >>                                                                   
>=>    >=>   >====>    >===>>=>                                                                    
                                                                                                   
[... truncated; full sample at ``sample.txt`` (approx. 41 more lines) ...]

cystack_0f69a6b9

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Log date, Operation System, Processor, System Language, TimeZone, User Name, UserLanguage, Version Build

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 30 Nov 25 18:14
Version Build: 1400
HWID: <redacted>
Country: Hungary
IP: <redacted>
System Language: Hungarian
Processor: Intel(R) Core(TM) i5-9400F CPU @ 2.90GHz (6 cores, 6 threads)
Installed RAM: 31.94 GB
Operation System: Windows 11 24H2 Pro (Build 26200) (64 Bit)
Graphics card: NVIDIA GeForce RTX 2060
Computer Name: <redacted>
Domain Name: <redacted>
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+1
UserLanguage: Hungarian
Keyboard Language: Hungarian
Display Resolution: 1440x1050

cystack_10fe4746

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, Log date, Operation System, Processor, Product Key, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 25 Oct 25 22:50 UTC
Country: AE
IP: <redacted>
System Language: English
Processor: 12th Gen Intel(R) Core(TM) i5-12400F
Installed RAM: 16197 MB
Operation System: Windows 11 24H2 build 26200 (64 Bit)
Graphics card: NVIDIA GeForce RTX 4060
Computer Name: <redacted>
Domain Name: <redacted>
Product Key: 
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+4
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080
Wallpaper Hash: 423295216c266958ef6cb2d6bc8eeea7f491ef75

cystack_133f0f19

Attribution confidence: unknown

Field keys: APPLE, Admin Group, BUILD NAME, Computer Name, Country, Display Resolution, Domain Name, GOOGLE, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Operation System, Processor, Product Key, Router MAC Address, System Language, TimeZone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

BUILD NAME: bigdick
HWID: <redacted>
Country: CA
IP: <redacted>
TimeZone: -3
System Language: English
Processor: AMD Ryzen 5 7600 6-Core Processor
Installed RAM: 31902 MB
Operation System: Windows 11-10.0.26200
Graphics card: AMD Radeon RX 7600 XT
Computer Name: <redacted>
Router MAC Address: <ip>
Domain Name: <redacted>
Product Key: VK7JG-NPHTM-C97JM-9MPGT-3V66T
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080
@stealerboss - Buy daily fresh logs: 41e8c2b506390bcdab59b9cb3fc1222c78d4aefa

=== GEOLOCATION ===
APPLE: 47.592857, -52.735085
GOOGLE: 47.592955, -52.73486

cystack_1863c96d

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, Operation System, Processor, System Language, TimeZone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

    Country: United Arab Emirates
IP: <redacted>
System Language: English
Processor: Intel(R) Core(TM) i5-10400F CPU @ 2.90GHz (6 cores, 12 threads)
Installed RAM: 15.86 GB
Operation System: Windows 10 22H2 Pro (Build 19045) (64 Bit)
Graphics card: NVIDIA GeForce GTX 1650
Computer Name: <redacted>
Domain Name: <redacted>
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+4
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080

cystack_1ed0fd47

Attribution confidence: unknown

Field keys: BUILD NAME, Computer Name, Country, Domain Name, Graphics card, HWID, IP, Installed RAM, Operation System, Processor, Product Key, Router MAC Address, System Language, TimeZone

Filenames: UserInformation.txt

Sample (sanitized):

BUILD NAME: Kassay
HWID: <redacted>
Country: AM
IP: <redacted>
TimeZone: +4
System Language: English
Processor: Intel(R) Core(TM) i3-2130 CPU @ 3.40GHz
Installed RAM: 16347 MB
Operation System: Windows 11-10.0.26200
Graphics card: NVIDIA GeForce GT 610
Computer Name: <redacted>
Router MAC Address: <ip>
Domain Name: <redacted>
Product Key: YTMG3-N6DKC-DKB77-7M9GH-8HVX7

cystack_20220931

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, Operation System, Processor, System Language, TimeZone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

***********************************************
*         _   _   _   _   _   _   _           *
*        / \ / \ / \ / \ / \ / \ / \          *
*       ( O | T | T | O | M | A | N )         *
*        \_/ \_/ \_/ \_/ \_/ \_/ \_/          *
*                                             *
*  Telegram : <url>  *
***********************************************

│    [  CLÓUD @OttoSup - Buy daily fresh logs @OttoSup - Buy daily fresh logsuy daily fresh logs ]     [ SUPPORT - @OttoSup - Buy daily fresh logs Buy daily fresh logs ]                          │
[... 3 blank lines ...]
│    [  CLÓUD @OttoSup - Buy daily fresh logs @OttoSup - Buy daily fresh logsuy daily fresh logs ]     [ SUPPORT - @OttoSup - Buy daily fresh logs Buy daily fresh logs ]                          │

  >=>>=>   >==>    >=>       >>       >===>>=====>     >=>    >=>    >=>          >>               
>=>    >=> >> >=>  >=>      >>=>           >=>      >=>   >=> >=>    >=>        >=>>=>             
 >=>       >=> >=> >=>     >> >=>          >=>     >=>        >=>    >=>       >=>                 
   >=>     >=>  >=>>=>    >=>  >=>         >=>     >=>        >=====>>=>        >==>               
      >=>  >=>   > >=>   >=====>>=>        >=>     >=>        >=>    >=>       >=>                 
>=>    >=> >=>    >>=>  >=>      >=>       >=>      >=>   >=> >=>    >=>        >=>>=>             
  >=>>=>   >=>     >=> >=>        >=>      >=>        >===>   >=>    >=>          >>               
                                                                                                   
>=>    >=> >=>     >=> >=>>=>                                                                      
>=>    >=> >=>     >=> >>   >=>                                                                    
>=>    >=> >=>     >=> >>    >=>                                                                   
>=====>>=> >=>     >=> >==>>=>                                                                     
[... truncated; full sample at ``sample.txt`` (approx. 39 more lines) ...]

cystack_2176857a

Attribution confidence: unknown

Field keys: Admin Group, Antivirus, City, Computer Name, Country, Display Resolution, Domain Name, Graphics card, IP Address, Integrity, Keyboard Language, Operation System, Postal Code, Region, TimeZone, Timezone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

Operation System: Windows 10 Pro build 19045 (64 Bit)
Graphics card: Intel(R) HD Graphics
Antivirus: Windows Defender
Computer Name: <redacted>
Domain Name: <redacted>
User Name: <redacted>
Admin Group: TRUE
Integrity: Medium
TimeZone: UTC-5
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080
@stealerboss - Buy daily fresh logs: cc7004c97e8a14ae8609fc739d8acc6a242abd07


                        IP GEOLOCATION DATA

IP Address:      <redacted>
Country:         United States (US)
Region:          South Carolina
City:            <redacted>
Postal Code:     <redacted>


Timezone:        America/Adak (UTC)

cystack_279e10c7

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, MachineID, Operation System, Processor, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

    Log date: 11 Dec 25 20:22 MSK
HWID: <redacted>
Country: CA
IP: <redacted>
System Language: English
Processor: AMD Ryzen 5 PRO 7530U with Radeon Graphics     
Installed RAM: 15681 MB
Operation System: Windows 10 Pro build 26100 (64 Bit)
Graphics card: AMD Radeon (TM) Graphics
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC-5
UserLanguage: English
Keyboard Language: English
Display Resolution: 1536x864
Wallpaper Hash: d08c477d7682cd97be0a55cf613fdf56c9c08923

cystack_2b6c44c5

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Display Resolution, Domain Name, Graphics card, Integrity, Keyboard Language, Log date, MachineID, Operation System, Product Key, TimeZone, Traffic, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 06 Jun 25 20:51 CEST
Traffic: @BRADMAX_LOG (BRADMAX) / <url>
Operation System: Windows 11 23H2 build 22631 (64 Bit)
Graphics card: NVIDIA GeForce GTX 1070
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key:
User Name: <redacted>
Admin Group: TRUE
Integrity: High
TimeZone: UTC+2
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080
Wallpaper Hash: 75fac2956852c4176f1a463aeb436451e3c40bfb

cystack_2d2c7ce0

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Log date, Operation System, Processor, System Language, TimeZone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 29 Dec 25 20:53
HWID: <redacted>
Country: Argentina
IP: <redacted>
System Language: Spanish
Processor: AMD Ryzen 5 8400F 6-Core Processor (6 cores, 12 threads)
Installed RAM: 31.64 GB
Operation System: Windows 10 22H2 Pro (Build 19045) (64 Bit)
Graphics card: AMD Radeon RX 6600
Computer Name: <redacted>
Domain Name: <redacted>
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC-3
UserLanguage: Spanish
Keyboard Language: Spanish
Display Resolution: 1920x1080

cystack_2e13a9b2

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Log date, MachineID, Operation System, Processor, Product Key, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 25 Oct 25
# Buy now:@BRADLOGS (BRADMAX) / <url>
HWID: <redacted>
Country: CA
IP: <redacted>
System Language: English
Processor: 12th Gen Intel(R) Core(TM) i5-1235U
Installed RAM: 16068 MB
Operation System: Windows 11 24H2 build 26100 (64 Bit)
Graphics card: Intel(R) Iris(R) Xe Graphics
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key: 
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC-3
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080
Wallpaper Hash: 2a9dc3afc25ee3f465343d47108ab027bb519214

cystack_32be75b7

Attribution confidence: unknown

Field keys: APPLE, Admin Group, BUILD NAME, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Operation System, Processor, Product Key, Router MAC Address, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

BUILD NAME: SoniYang
HWID: <redacted>
Country: PL
IP: <redacted>
TimeZone: +1
System Language: Polish
Processor: 12th Gen Intel(R) Core(TM) i3-12100F
Installed RAM: 16220 MB
Operation System: Windows 10-10.0.19045
Graphics card: NVIDIA GeForce GTX 1660 SUPER
Computer Name: <redacted>
Router MAC Address: <ip>
Domain Name: <redacted>
Product Key: H2FN2-F294C-GWT3W-JPDF7-HXMWW
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
UserLanguage: Polish
Keyboard Language: Polish
Display Resolution: 1920x1080
Wallpaper Hash: e1499c7fc36609a51ef4d5097dc8acd40458968a

=== GEOLOCATION ===
APPLE: 54.324276, 22.938889

cystack_36946d93

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Log date, Operation System, Product Key, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: System.txt

Sample (sanitized):

Log date: 22 Oct 25
HWID: <redacted>
Country: DE
IP: <redacted>
System Language: German
Installed RAM: 32694 MB
Operation System: Windows 11 24H2 build 26200 (64 Bit)
Graphics card: NVIDIA GeForce RTX 3060
Computer Name: <redacted>
Domain Name: <redacted>
Product Key: 
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+1
UserLanguage: German
Keyboard Language: German
Display Resolution: 1920x1080
Wallpaper Hash: 25b17a70b148b221d1934a0536534cf974ba1aa6

cystack_3c5357c9

Attribution confidence: unknown

Field keys: Admin Group, Country, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, Operation System, Processor, Product Key, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Country: MX
IP: <redacted>
System Language: Spanish
Processor: Intel(R) Core(TM) i3-3217U CPU @ 1.80GHz
Installed RAM: 8067 MB
Operation System: Windows 10 22H2 build 19045 (64 Bit)
Graphics card: Intel(R) HD Graphics 4000
Domain Name: <redacted>
Product Key: 
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC-6
UserLanguage: Spanish
Keyboard Language: Spanish
Display Resolution: 1366x768
Wallpaper Hash: 9ba14c26fe5d0d2cf71bc09a782dd7ca246d212a

cystack_3e6f8831

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, MachineID, Operation System, Processor, Product Key, System Language, TimeZone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

    Log date: 09 Nov 25 09:14 CET
HWID: <redacted>
Country: PH
IP: <redacted>
System Language: English
Processor: Intel(R) Core(TM) i5-4300M CPU @ 2.60GHz
Installed RAM: 8097 MB
Operation System: Windows 10 22H2 build 19045 (64 Bit)
Graphics card: Intel(R) HD Graphics 4600
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key: 
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+8
UserLanguage: English
Keyboard Language: English
Display Resolution: 1366x768
@Ottohelp - Buy daily fresh logs:

cystack_3ffbbc4b

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Display Resolution, Domain Name, Graphics card, Integrity, Keyboard Language, Log date, MachineID, Operation System, Processor, Product Key, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 01 Jun 25 19:10 MSK
Processor: AMD Ryzen 5 5600X 6-Core Processor
Operation System: Windows 11 24H2 build 26100 (64 Bit)
Graphics card: NVIDIA GeForce GTX 1070
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key:
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+4
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080
Wallpaper Hash: fdf75faf77bd6876018383a7fbf3e182026fdb3e

cystack_42e7066c

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, MachineID, Operation System, Processor, Product Key, System Language, TimeZone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

***********************************************
*         _   _   _   _   _   _   _           *
*        / \ / \ / \ / \ / \ / \ / \          *
*       ( O | T | T | O | M | A | N )         *
*        \_/ \_/ \_/ \_/ \_/ \_/ \_/          *
*                                             *
*  Telegram : <url>  *
***********************************************

Country: CN
IP: <redacted>
System Language: Chinese (Simplified)
Processor: AMD Ryzen 5 5600 6-Core Processor              
Installed RAM: 32708 MB
Operation System: Windows 11 24H2 build 26100 (64 Bit)
Graphics card: AMD Radeon RX 5600 XT
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key: 
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+8
UserLanguage: Chinese (Simplified)
Keyboard Language: Chinese (Simplified)
Display Resolution: 2560x1440
@OttoSup - Buy daily fresh logs: e17a2e2acd620b4f0c81674d1b3c51bf2e4ebc01

cystack_47bdc5de

Attribution confidence: unknown

Field keys: Admin Group, Country, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, Operation System, Processor, System Language, TimeZone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

[... 4 blank lines ...]
Country: Australia
IP: <redacted>
System Language: English
Processor: 12th Gen Intel(R) Core(TM) i7-12650H (10 cores, 16 threads)
Installed RAM: 15.78 GB
Operation System: Windows 11 25H2 Home (Build 26200) (64 Bit)
Graphics card: NVIDIA GeForce RTX 4070 Laptop GPU
Computer Name
Domain Name: <redacted>
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+10
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080

cystack_49f11599

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Log date, MachineID, Operation System, Processor, Prodct Key, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 27 Sep 25 19:15 MSK
now: @russia_logs
HWID: <redacted>
Country: IN
IP: <redacted>
System Language: English
Processor: Intel(R) Core(TM) i3-2120 CPU @ 3.30GHz
Installed RAM: 12252 MB
Operation System: Windows 10 22H2 build 19045 (64 Bit)
Graphics card: NVIDIA GeForce GT 610
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Prodct Key:   @ logs_russia   
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+5
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080
Wallpaper Hash: 0825e886///  @ l o g s _ r u s s i a  ///4c47e6 cae75034d51d8ffe2fa03196d9a08f6958757be6

cystack_4d65acc2

Attribution confidence: unknown

Field keys: Admin Group, Display Resolution, Integrity, Keyboard Language, TimeZone, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

Admin Group: TRUE
Integrity: High
TimeZone: UTC+2
UserLanguage: English
Keyboard Language: English
Display Resolution: 1536x864

cystack_5064d0de

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, Log date, MachineID, Operation System, Processor, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 03 Dec 25 12:46 MSKHWID: LAPTOP-4Q4637J7
Country: CL
IP: <redacted>
System Language: Spanish
Processor: Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz
Installed RAM: 8077 MB
Operation System: Windows 10 Home Single Language build 19045 (64 Bit)
Graphics card: Unknown
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC-4
UserLanguage: Spanish
Keyboard Language: Spanish
Display Resolution: 1366x768
Wallpaper Hash: d08c477d7682cd97be0a55cf613fdf56c9c08923

cystack_5076fdca

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, MachineID, Operation System, Processor, Product Key, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: System.txt, UserInformation.txt

Sample (sanitized):

Country: CA
IP: <redacted>
System Language: English
Processor: 12th Gen Intel(R) Core(TM) i5-12500
Installed RAM: 7880 MB
Operation System: Windows 11 24H2 build 26100 (64 Bit)
Graphics card: Intel(R) UHD Graphics 770
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key: 
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC-6
UserLanguage: English
Keyboard Language: Chinese (Simplified)
Display Resolution: 1920x1080
Wallpaper Hash: bacd46dd2134fea31c6a5f275c21c01507f209e7

cystack_5455ca59

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, Operation System, Processor, System Language, TimeZone, User Name, UserLanguage

Filenames: System.txt, UserInformation.txt

Sample (sanitized):

Country: United Arab Emirates
IP: <redacted>
System Language: English
Processor: Intel(R) Core(TM) i9-14900KF (24 cores, 32 threads)
Installed RAM: 31.79 GB
Operation System: Windows 11 25H2 Pro (Build 26200) (64 Bit)
Graphics card: NVIDIA GeForce RTX 4080 SUPER
Computer Name: <redacted>
Domain Name: <redacted>
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+4
UserLanguage: English
Keyboard Language: English
Display Resolution: 5120x1440

cystack_5542c850

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Log date, Operation System, Processor, Product Key, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: System.txt, UserInformation.txt

Sample (sanitized):

Log date: 27 May 25 22:10 CEST
HWID: <redacted>
Country: EG
IP: <redacted>
System Language: English
Processor: AMD Ryzen 5 2600 Six-Core Processor
Installed RAM: 32698 MB
Operation System: Windows 10 22H2 build 19045 (64 Bit)
Graphics card: Radeon RX 580 Series
Computer Name: <redacted>
Domain Name: <redacted>
Product Key:
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+2
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080
Wallpaper Hash: a8b77af6840c868ba701807d079bf95db7f03e63

cystack_59125a87

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Log date, Operation System, Processor, System Language, TimeZone, Traffic, User Name, UserLanguage, Version Build

Filenames: UserInformation.txt

Sample (sanitized):

⣿⣿⣿⣿⡟⠛⠁⠄⠄⠄⠄⢀⣀⣀⠄⠄⠄⠄⣤⣽⣿⣿⣿⣿⣿⣿⣿⣿
⣿⣿⣿⡋⠁⠄⠄⠄⣠⣶⣾⣿⣿⣿⣿⠄⢦⡄⠐⠬⠛⢿⣿⣿⣿⣿⣿⣿
⣿⡿⠇⠁⠄⠄⣠⣾⣿⣿⡿⠟⠋⠁⠄⠄⠈⠁⠄⠄⠄⠄⠙⢿⣿⣿⣿⣿
⣿⠃⠄⠄⠄⠘⣿⣿⣿⣿⢀⣠⠄⠄⠄⠄⣰⣶⣀⠄⠄⠄⠄⠸⣿⣿⣿⣿
⣏⠄⠄⠄⠄⠄⣿⣿⣿⡿⢟⣁⠄⣀⣠⣴⣿⣿⠿⠷⠶⠒⠄⠄⢹⣿⣿⣿
⡏⠄⠄⠄⠄⢰⣿⣿⣿⣿⣿⣿⣿⣿⡟⠄⠛⠁⠄⠄⠄⠄⠄⠄⢠⣿⣿⣿
⡇⠄⠄⠄⠄⠈⢿⣿⣿⣿⣿⣿⣿⣿⡇⠄⣼⣿⠇⠘⠄⠁⠄⠄⠄⢻⣿⣿ - Fucked by Boss Of This Gym
⣇⠄⠄⠄⠄⠄⠸⢿⣿⣿⣿⣿⣿⣿⠁⠸⠟⠁⣠⣤⣤⣶⣤⠄⠄⠄⢻⣿
⣿⡄⠄⡤⢤⣤⡀⠈⣿⣿⣿⣿⣿⣿⡆⠄⠄⠘⠋⠁⠄⠄⠈⠄⠄⠄⢸⣿ - You known number 8639479?
⣿⣿⡜⢰⡾⢻⣧⣰⣿⣿⣿⣿⣿⣿⣷⠄⣼⣷⣶⣶⡆⠄⠄⠄⠄⠄⠄⣿
⣿⣿⣧⢸⠄⣼⣿⣿⣿⣿⣿⣿⣿⣿⣿⣷⣿⣿⣿⣿⠄⠄⠄⠄⠄⠄⠄⣿
⣿⣿⣿⣿⡿⢿⡟⠉⢻⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣷⠄⠄⢀⡀⠄⠘⣿
⣿⣿⣿⣿⣿⣆⢻⣶⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⡿⠟⠋⠄⠄⠈⠁⠄⠄⣿
⣿⣿⣿⣿⣿⣿⡆⢻⣿⣿⣿⣿⣿⣿⡿⠛⠛⠛⠃⠄⠄⠄⠄⠄⠄⠄⢀⣿
⣿⣿⣿⣿⣿⣿⣿⣆⣻⣿⣿⣿⣿⣿⣷⠄⠄⠄⠄⠄⠄⠄⠄⠄⠄⠄⢸⣿

Log date: 27 Dec 25 20:29
Traffic: GithubGolderWork
Version Build: Magnum Opus
HWID: <redacted>
Country: Türkiye
IP: <redacted>
System Language: Turkish
Processor: AMD Ryzen 5 9600 6-Core Processor (6 cores, 12 threads)
Installed RAM: 15.10 GB
Operation System: Windows 10 22H2 Pro (Build 19045) (64 Bit)
Graphics card: AMD Radeon(TM) Graphics + NVIDIA GeForce RTX 4060
Computer Name: <redacted>
Domain Name: <redacted>
-------------
User Name: <redacted>
Admin Group: TRUE
Integrity: High
TimeZone: UTC+3
UserLanguage: Turkish
Keyboard Language: Turkish
Display Resolution: 2560x1440

cystack_5f7be6d7

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, Log date, MachineID, Operation System, Processor, Product Key, System Language, TimeZone, Traffic, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 06 Jun 25 20:00 CEST
Traffic: @BRADMAX_LOG (BRADMAX) / <url>
Country: AR
IP: <redacted>
System Language: Spanish
Processor: AMD Ryzen 5 4500 6-Core Processor
Installed RAM: 40751 MB
Operation System: Windows 11 24H2 build 26100 (64 Bit)
Graphics card: NVIDIA GeForce RTX 3060
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key:
User Name: <redacted>
Admin Group: TRUE
Integrity: High
TimeZone: UTC-3
UserLanguage: Spanish
Keyboard Language: Spanish
Display Resolution: 2560x1440
Wallpaper Hash: 057c2a661c927407f659de4e8c8d30fc913acaa4

cystack_5fc739a4

Attribution confidence: unknown

Field keys: Computer Name, Country, Domain Name, Graphics card, IP, Installed RAM, MachineID, Operation System, Processor, System Language

Filenames: UserInformation.txt

Sample (sanitized):

***********************************************
*         _   _   _   _   _   _   _           *
*        / \ / \ / \ / \ / \ / \ / \          *
*       ( O | T | T | O | M | A | N )         *
*        \_/ \_/ \_/ \_/ \_/ \_/ \_/          *
*                                             *
*  Telegram : <url>  *
***********************************************

  >=>>=>   >==>    >=>       >>       >===>>=====>     >=>    >=>    >=>          >>               
>=>    >=> >> >=>  >=>      >>=>           >=>      >=>   >=> >=>    >=>        >=>>=>             
 >=>       >=> >=> >=>     >> >=>          >=>     >=>        >=>    >=>       >=>                 
   >=>     >=>  >=>>=>    >=>  >=>         >=>     >=>        >=====>>=>        >==>               
      >=>  >=>   > >=>   >=====>>=>        >=>     >=>        >=>    >=>       >=>                 
>=>    >=> >=>    >>=>  >=>      >=>       >=>      >=>   >=> >=>    >=>        >=>>=>             
  >=>>=>   >=>     >=> >=>        >=>      >=>        >===>   >=>    >=>          >>               
                                                                                                   
>=>    >=> >=>     >=> >=>>=>                                                                      
>=>    >=> >=>     >=> >>   >=>                                                                    
>=>    >=> >=>     >=> >>    >=>                                                                   
>=====>>=> >=>     >=> >==>>=>                                                                     
>=>    >=> >=>     >=> >>    >=>                                                                   
>=>    >=> >=>     >=> >>     >>                                                                   
>=>    >=>   >====>    >===>>=>                                                                    
                                                                                                   
[... truncated; full sample at ``sample.txt`` (approx. 43 more lines) ...]

cystack_60ccf6d5

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, MachineID, Operation System, Processor, Product Key, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

    Country: AE
IP: <redacted>
System Language: English
Processor: Intel(R) Core(TM) i5-9400F CPU @ 2.90GHz
Installed RAM: 16319 MB
Operation System: Windows 11 24H2 build 26200 (64 Bit)
Graphics card: NVIDIA GeForce GTX 1660 SUPER
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key: 
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+4
UserLanguage: English
Keyboard Language: English
Display Resolution: 1720x1080
Wallpaper Hash: 4d10156e41790d76cd3e7133778b082af9242d78

cystack_64ab919a

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, Log date, MachineID, Operation System, Processor, Product Key, System Language, TimeZone, Traffic, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 03 Jun 25 06:13 CEST
Traffic: @BRADMAX_LOG (BRADMAX) / <url>
Country: JP
IP: <redacted>
System Language: Japanese
Processor: 12th Gen Intel(R) Core(TM) i5-12400
Installed RAM: 16125 MB
Operation System: Windows 11 24H2 build 26100 (64 Bit)
Graphics card: NVIDIA GeForce RTX 3060
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key:
Admin Group: TRUE
Integrity: High
TimeZone: UTC+9
UserLanguage: Japanese
Keyboard Language: Japanese
Display Resolution: 1920x1080
Wallpaper Hash: 0f8bee011383a069bd2d1fbd678fba86021b5036

cystack_655435f6

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, MachineID, Operation System, Processor, Product Key, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

    Log date: 03 Nov 25 15:40 CET
HWID: <redacted>
Country: TR
IP: <redacted>
System Language: Turkish
Processor: 12th Gen Intel(R) Core(TM) i5-12400F
Installed RAM: 16243 MB
Operation System: Windows 11 24H2 build 26200 (64 Bit)
Graphics card: NVIDIA GeForce RTX 4060
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key: 
-------------
User Name: <redacted>
Admin Group: TRUE
Integrity: High
TimeZone: UTC+3
UserLanguage: Turkish
Keyboard Language: Turkish
Display Resolution: 3440x1440
Wallpaper Hash: db91794afafc7b32b6d71b9561e067f72ceb4e16

cystack_67d5e1ab

Attribution confidence: unknown

Field keys: Admin Group, Antivirus, City, Computer Name, Country, Display Resolution, Domain Name, Graphics card, IP Address, Installed RAM, Integrity, Keyboard Language, Operation System, Postal Code, Processor, Region, TimeZone, Timezone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

Processor: 12th Gen Intel(R) Core(TM) i5-12400F
Installed RAM: 16169 MB
Operation System: Windows 10 Pro build 26200 (64 Bit)
Graphics card: NVIDIA GeForce RTX 3050
Antivirus: None
Computer Name: <redacted>
Domain Name: <redacted>
User Name: <redacted>
Admin Group: TRUE
Integrity: Medium
TimeZone: UTC+3
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080
@stealerboss - Buy daily fresh logs: no_wallpaper


                        IP GEOLOCATION DATA

IP Address:      <redacted>
Country:         Saudi Arabia (SA)
Region:          Riyadh Region
City:            <redacted>
Postal Code:     <redacted>


Timezone:        Asia/Riyadh (UTC)

cystack_6d229675

Attribution confidence: unknown

Field keys: Admin Group, Country, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, Log date, Operation System, Processor, Product Key, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 23 Nov 25
Country: AE
IP: <redacted>
System Language: English
Processor: 13th Gen Intel(R) Core(TM) i7-13700H
Installed RAM: 16064 MB
Operation System: Windows 11 24H2 build 26200 (64 Bit)
Graphics card: Intel(R) UHD Graphics
Domain Name: <redacted>
Product Key: 
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+4
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1200
Wallpaper Hash: 32a4f2aead9726b13a6b06d1170070a036adac8e

cystack_6f79d741

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Display Resolution, Domain Name, Graphics card, Installed RAM, Integrity, Keyboard Language, Log date, MachineID, Operation System, Processor, Product Key, System Language, TimeZone, Traffic, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 26 May 25 17:48 UTC
Traffic: @BRADMAX_LOG (BRADMAX) / <url>
System Language: English
Processor: Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz
Installed RAM: 8152 MB
Operation System: Windows 10 22H2 build 19045 (64 Bit)
Graphics card: NVIDIA GeForce GT 555M
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key:
User Name: <redacted>
Admin Group: TRUE
Integrity: High
TimeZone: UTC+1
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080
Wallpaper Hash: 92ada9d59909cfc574f7792feb6bb86d260f2183

cystack_7219389c

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Log date, MachineID, Operation System, Processor, Product Key, System Language, TimeZone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

***********************************************
*         _   _   _   _   _   _   _           *
*        / \ / \ / \ / \ / \ / \ / \          *
*       ( O | T | T | O | M | A | N )         *
*        \_/ \_/ \_/ \_/ \_/ \_/ \_/          *
*                                             *
*  Telegram : <url>  *
***********************************************

Log date: 08 Nov 25 22:32 CET
@OttoSup - Buy daily fresh logs ilovepakistan
HWID: <redacted>
Country: JM
IP: <redacted>
System Language: English
Processor: Intel(R) Core(TM) i3-7100U CPU @ 2.40GHz
Installed RAM: 8060 MB
Operation System: Windows 10 22H2 build 19045 (64 Bit)
Graphics card: Intel(R) HD Graphics 620
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key: 
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC-5
UserLanguage: English
Keyboard Language: English
Display Resolution: 1366x768
@OttoSup - Buy daily fresh logs:

cystack_730f988c

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Log date, MachineID, Operation System, Processor, System Language, TimeZone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

***********************************************
*         _   _   _   _   _   _   _           *
*        / \ / \ / \ / \ / \ / \ / \          *
*       ( O | T | T | O | M | A | N )         *
*        \_/ \_/ \_/ \_/ \_/ \_/ \_/          *
*                                             *
*  Telegram : <url>  *
***********************************************

Log date: 01 Dec 25 12:39 MSK
HWID: <redacted>
Country: BE
IP: <redacted>
System Language: French
Processor: Intel(R) Core(TM) i3-10100 CPU @ 3.60GHz
Installed RAM: 8035 MB
Operation System: Windows 10 Home build 19045 (64 Bit)
Graphics card: Unknown
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+1
UserLanguage: French
Keyboard Language: French
Display Resolution: 1366x768
@Ottohelp - Buy daily fresh logs: d08c477d7682cd97be0a55cf613fdf56c9c08923

cystack_7a2d1647

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Operation System, System Language, TimeZone, User Name, UserLanguage

Filenames: System.txt

Sample (sanitized):

1234
HWID: <redacted>
Country: KR
IP: <redacted>
System Language: Korean
Installed RAM: 31.63 GB
Operation System: Windows 11 (Build 26200) (64 Bit)
Graphics card: Intel(R) UHD Graphics
Computer Name: <redacted>
Domain Name: <redacted>
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+9
UserLanguage: Korean
Keyboard Language: Korean
Display Resolution: 2048x1152

cystack_7cd05ed9

Attribution confidence: unknown

Field keys: APPLE, Admin Group, Computer Name, Country, Display Resolution, Domain Name, GOOGLE, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Operation System, Processor, Product Key, Router MAC Address, System Language, TimeZone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

HWID: <redacted>
Country: FR
IP: <redacted>
TimeZone: +1
System Language: French
Processor: 11th Gen Intel(R) Core(TM) i5-1135G7 @ 2.40GHz
Installed RAM: 16112 MB
Operation System: Windows 10-10.0.19045
Graphics card: Intel(R) Iris(R) Xe Graphics
Computer Name: <redacted>
Router MAC Address: <ip>
Domain Name: <redacted>
Product Key: VK7JG-NPHTM-C97JM-9MPGT-3V66T
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
UserLanguage: French
Keyboard Language: French
Display Resolution: 1280x720
@stealerboss - Buy daily fresh logs: 92073779a1fec9d53c640a8f513324f484bf5879

=== GEOLOCATION ===
APPLE: 48.881622, 2.394148
GOOGLE: 48.881633, 2.394072

cystack_83c06639

Attribution confidence: unknown

Field keys: Admin Group, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Log date, MachineID, Operation System, Processor, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 11 Dec 25 15:46 MSK
HWID: <redacted>
Country: CL
IP: <redacted>
System Language: Spanish
Processor: Intel(R) Pentium(R) CPU G3220 @ 3.00GHz
Installed RAM: 8009 MB
Operation System: Windows 10 Pro build 19045 (64 Bit)
Graphics card: Intel(R) HD Graphics
Domain Name: <redacted>
MachineID: <redacted>
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC-4
UserLanguage: Spanish
Keyboard Language: Spanish
Display Resolution: 1920x1080
Wallpaper Hash: d08c477d7682cd97be0a55cf613fdf56c9c08923

cystack_852cc8d8

Attribution confidence: unknown

Field keys: Computer Name, Country, Domain Name, Graphics card, IP, Installed RAM, MachineID, Operation System, Processor, Product Key, System Language, User Name

Filenames: UserInformation.txt

Sample (sanitized):

***********************************************
*         _   _   _   _   _   _   _           *
*        / \ / \ / \ / \ / \ / \ / \          *
*       ( O | T | T | O | M | A | N )         *
*        \_/ \_/ \_/ \_/ \_/ \_/ \_/          *
*                                             *
*  Telegram : <url>  *
***********************************************

  >=>>=>   >==>    >=>       >>       >===>>=====>     >=>    >=>    >=>          >>               
>=>    >=> >> >=>  >=>      >>=>           >=>      >=>   >=> >=>    >=>        >=>>=>             
 >=>       >=> >=> >=>     >> >=>          >=>     >=>        >=>    >=>       >=>                 
   >=>     >=>  >=>>=>    >=>  >=>         >=>     >=>        >=====>>=>        >==>               
      >=>  >=>   > >=>   >=====>>=>        >=>     >=>        >=>    >=>       >=>                 
>=>    >=> >=>    >>=>  >=>      >=>       >=>      >=>   >=> >=>    >=>        >=>>=>             
  >=>>=>   >=>     >=> >=>        >=>      >=>        >===>   >=>    >=>          >>               
                                                                                                   
>=>    >=> >=>     >=> >=>>=>                                                                      
>=>    >=> >=>     >=> >>   >=>                                                                    
>=>    >=> >=>     >=> >>    >=>                                                                   
>=====>>=> >=>     >=> >==>>=>                                                                     
>=>    >=> >=>     >=> >>    >=>                                                                   
>=>    >=> >=>     >=> >>     >>                                                                   
>=>    >=>   >====>    >===>>=>                                                                    
                                                                                                   
[... truncated; full sample at ``sample.txt`` (approx. 43 more lines) ...]

cystack_93fee37c

Attribution confidence: unknown

Field keys: Admin Group, BUILD NAME, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Operation System, Processor, Product Key, Router MAC Address, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

BUILD NAME: SoniYang
HWID: <redacted>
Country: AM
IP: <redacted>
TimeZone: +4
System Language: English
Processor: Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz
Installed RAM: 8175 MB
Operation System: Windows 10-10.0.19045
Graphics card: Radeon(TM) RX 460 Graphics
Computer Name: <redacted>
Router MAC Address: <ip>
Domain Name: <redacted>
Product Key: 96YNV-9X4RP-2YYKB-RMQH4-6Q72D
-------------
User Name: <redacted>
Admin Group: TRUE
Integrity: High
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080
Wallpaper Hash: Unknown

cystack_98fabc58

Attribution confidence: unknown

Field keys: Computer Name, Country, Domain Name, Graphics card, IP, Installed RAM, MachineID, Operation System, Processor, Product Key, System Language

Filenames: UserInformation.txt

Sample (sanitized):

***********************************************
*         _   _   _   _   _   _   _           *
*        / \ / \ / \ / \ / \ / \ / \          *
*       ( O | T | T | O | M | A | N )         *
*        \_/ \_/ \_/ \_/ \_/ \_/ \_/          *
*                                             *
*  Telegram : <url>  *
***********************************************

  >=>>=>   >==>    >=>       >>       >===>>=====>     >=>    >=>    >=>          >>               
>=>    >=> >> >=>  >=>      >>=>           >=>      >=>   >=> >=>    >=>        >=>>=>             
 >=>       >=> >=> >=>     >> >=>          >=>     >=>        >=>    >=>       >=>                 
   >=>     >=>  >=>>=>    >=>  >=>         >=>     >=>        >=====>>=>        >==>               
      >=>  >=>   > >=>   >=====>>=>        >=>     >=>        >=>    >=>       >=>                 
>=>    >=> >=>    >>=>  >=>      >=>       >=>      >=>   >=> >=>    >=>        >=>>=>             
  >=>>=>   >=>     >=> >=>        >=>      >=>        >===>   >=>    >=>          >>               
                                                                                                   
>=>    >=> >=>     >=> >=>>=>                                                                      
>=>    >=> >=>     >=> >>   >=>                                                                    
>=>    >=> >=>     >=> >>    >=>                                                                   
>=====>>=> >=>     >=> >==>>=>                                                                     
>=>    >=> >=>     >=> >>    >=>                                                                   
>=>    >=> >=>     >=> >>     >>                                                                   
>=>    >=>   >====>    >===>>=>                                                                    
                                                                                                   
[... truncated; full sample at ``sample.txt`` (approx. 43 more lines) ...]

cystack_9e96ff0e

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, Installed RAM, Integrity, Keyboard Language, Log date, MachineID, Operation System, Processor, Product Key, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 01 Jun 25 20:48 MSK
Country: AR
System Language: Spanish
Processor: Pentium(R) Dual-Core  CPU      E5400  @ 2.70GHz
Installed RAM: 7391 MB
Operation System: Windows 10 21H2 build 19044 (64 Bit)
Graphics card: Intel(R) Q45/Q43 Express Chipset (Microsoft Corporation - WDDM 1.1)
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key:
User Name: <redacted>
Admin Group: TRUE
Integrity: High
TimeZone: UTC-3
UserLanguage: Spanish
Keyboard Language: Spanish
Display Resolution: 1280x768
Wallpaper Hash: 092de22a2e2a5929e32da3495acf45ed14ce9ec5

cystack_a06e8d9d

Attribution confidence: unknown

Field keys: Admin Group, Antivirus, City, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP Address, Installed RAM, Integrity, Keyboard Language, Log date, Operation System, Postal Code, Processor, Region, System Language, TimeZone, Timezone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 19 Mar 26 21:51
HWID: <redacted>
System Language: Bulgarian
Processor: Intel(R) Core(TM) i5-10400F CPU @ 2.90GHz
Installed RAM: 16292 MB
Operation System: Windows 10 Enterprise build 19045 (64 Bit)
Graphics card: NVIDIA GeForce GTX 1650
Antivirus: Avast
Computer Name: <redacted>
Domain Name: <redacted>
User Name: 
<redacted>
Integrity: Medium
TimeZone: UTC+2
UserLanguage: Bulgarian
Keyboard Language: Bulgarian
Display Resolution: 1920x1080
Wallpaper Hash: 56986185af209b182164a6758c8747683988febc

═══════════════════════════════════════════════════════════════════
                        IP GEOLOCATION DATA
═══════════════════════════════════════════════════════════════════

IP Address:      <redacted>
Country:         Bulgaria (BG)
Region:          Pazardzhik
City:            <redacted>
Postal Code:     <redacted>

Timezone:        Europe/Sofia (UTC)

═══════════════════════════════════════════════════════════════════

cystack_a0f3c667

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Operation System, Processor, System Language, TimeZone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

HWID: <redacted>
Country: United Arab Emirates
IP: <redacted>
System Language: English
Processor: Intel(R) Core(TM) i5-9400F CPU @ 2.90GHz (6 cores, 6 threads)
Installed RAM: 15.92 GB
Operation System: Windows 10 22H2 Pro (Build 19045) (64 Bit)
Graphics card: NVIDIA GeForce RTX 2060 SUPER
Computer Name: <redacted>
Domain Name: <redacted>
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+4
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080

cystack_a5858752

Attribution confidence: unknown

Field keys: Admin Group, Country, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, MachineID, Operation System, Processor, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Country: BT
IP: <redacted>
System Language: English
Processor: AMD Ryzen 7 5800H with Radeon Graphics 
Installed RAM: 14188 MB
Operation System: Windows 10 Home Single Language build 26200 (64 Bit)
Graphics card: Unknown
Domain Name: <redacted>
MachineID: <redacted>
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+6
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080
Wallpaper Hash: d08c477d7682cd97be0a55cf613fdf56c9c08923

cystack_ac3930f8

Attribution confidence: unknown

Field keys: Admin Group, BUILD NAME, Computer Name, Country, Display Resolution, Domain Name, GOOGLE, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Operation System, Processor, Product Key, Router MAC Address, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

BUILD NAME: SoniYang
HWID: <redacted>
Country: DE
IP: <redacted>
TimeZone: +3
System Language: Russian
Processor: Intel(R) Core(TM) i7-9700F CPU @ 3.00GHz
Installed RAM: 49070 MB
Operation System: Windows 11-10.0.26100
Graphics card: NVIDIA GeForce RTX 2070 SUPER
Computer Name: <redacted>
Router MAC Address: <ip>
Domain Name: <redacted>
Product Key: BT79Q-G7N6G-PGBYW-4YWX6-6F4BT
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
UserLanguage: Russian
Keyboard Language: Russian
Display Resolution: 1920x1080
Wallpaper Hash: 7a5b520171c2c84594ec79ba42a9b35e7b4b55e1

=== GEOLOCATION ===
GOOGLE: 60.001051, 30.430933

cystack_ac5ebc70

Attribution confidence: unknown

Field keys: Computer Name, Country, Display Resolution, Domain Name, HWID, IP, Installed RAM, Keyboard Language, Log date, MachineID, Operation System, Processor, Product Key, System Language, TimeZone, Traffic, User Name, UserLanguage, Video card, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 15 Mar 25 20:56 UTC
Traffic: @MAXERSTE (BRADMAX) / <url>
HWID: <redacted>
Country: DZ
IP: <redacted>
System Language: English
Processor: Intel(R) Core(TM)2 Duo CPU     P7450  @ 2.13GHz
Installed RAM: 4024 MB
Operation System: Windows 10 build 19045 (64 Bit)
Video card: Mobile Intel(R) 4 Series Express Chipset Family (Microsoft Corporation - WDDM 1.1)
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key: 
-------------
User Name: <redacted>
TimeZone: UTC-8
UserLanguage: English
Keyboard Language: French
Display Resolution: 1366x768
Wallpaper Hash: 9926b26bfb8ba791ca1b08e52dbcc60bd1daed78

cystack_ae1e54a0

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, Operation System, System Language, TimeZone, User Name, UserLanguage

Filenames: System.txt

Sample (sanitized):

⣿⣿⣿⣿⡟⠛⠁⠄⠄⠄⠄⢀⣀⣀⠄⠄⠄⠄⣤⣽⣿⣿⣿⣿⣿⣿⣿⣿
⣿⣿⣿⡋⠁⠄⠄⠄⣠⣶⣾⣿⣿⣿⣿⠄⢦⡄⠐⠬⠛⢿⣿⣿⣿⣿⣿⣿
⣿⡿⠇⠁⠄⠄⣠⣾⣿⣿⡿⠟⠋⠁⠄⠄⠈⠁⠄⠄⠄⠄⠙⢿⣿⣿⣿⣿
⣿⠃⠄⠄⠄⠘⣿⣿⣿⣿⢀⣠⠄⠄⠄⠄⣰⣶⣀⠄⠄⠄⠄⠸⣿⣿⣿⣿
⣏⠄⠄⠄⠄⠄⣿⣿⣿⡿⢟⣁⠄⣀⣠⣴⣿⣿⠿⠷⠶⠒⠄⠄⢹⣿⣿⣿
⡏⠄⠄⠄⠄⢰⣿⣿⣿⣿⣿⣿⣿⣿⡟⠄⠛⠁⠄⠄⠄⠄⠄⠄⢠⣿⣿⣿
⣇⠄⠄⠄⠄⠄⠸⢿⣿⣿⣿⣿⣿⣿⠁⠸⠟⠁⣠⣤⣤⣶⣤⠄⠄⠄⢻⣿
⣿⣿⡜⢰⡾⢻⣧⣰⣿⣿⣿⣿⣿⣿⣷⠄⣼⣷⣶⣶⡆⠄⠄⠄⠄⠄⠄⣿
⣿⣿⣧⢸⠄⣼⣿⣿⣿⣿⣿⣿⣿⣿⣿⣷⣿⣿⣿⣿⠄⠄⠄⠄⠄⠄⠄⣿
⣿⣿⣿⣿⡿⢿⡟⠉⢻⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣷⠄⠄⢀⡀⠄⠘⣿
⣿⣿⣿⣿⣿⣆⢻⣶⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⡿⠟⠋⠄⠄⠈⠁⠄⠄⣿
⣿⣿⣿⣿⣿⣿⡆⢻⣿⣿⣿⣿⣿⣿⡿⠛⠛⠛⠃⠄⠄⠄⠄⠄⠄⠄⢀⣿
⣿⣿⣿⣿⣿⣿⣿⣆⣻⣿⣿⣿⣿⣿⣷⠄⠄⠄⠄⠄⠄⠄⠄⠄⠄⠄⢸⣿
Country: Poland
IP: <redacted>
System Language: Polish
Installed RAM: 16.00 GB
Operation System: Windows 10 (Build 19045) (64 Bit)
Graphics card: AMD Radeon RX 7600
Computer Name: <redacted>
Domain Name: <redacted>
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+1
UserLanguage: Polish
Keyboard Language: Polish
Display Resolution: 1920x1080

cystack_b2032ab1

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, Operation System, Product Key, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: System.txt

Sample (sanitized):

Country: EG
IP: <redacted>
System Language: English
Installed RAM: 16274 MB
Operation System: Windows 10 RS2 build 15063 (64 Bit)
Graphics card: Intel(R) HD Graphics 4600
Computer Name: <redacted>
Domain Name: <redacted>
Product Key: 
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+2
UserLanguage: English
Keyboard Language: English
Display Resolution: 1280x1024
Wallpaper Hash: f0a7ac82ec1ed31217b95e848e2a95baebd6b991

cystack_b59e8be9

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Display Resolution, Domain Name, Graphics card, Installed RAM, Integrity, Keyboard Language, Log date, MachineID, Operation System, Product Key, TimeZone, Traffic, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 03 Jun 25 14:27 CEST
Traffic: @BRADMAX_LOG (BRADMAX) / <url>
Installed RAM: 8062 MB
Operation System: Windows 10 22H2 build 19045 (64 Bit)
Graphics card: Intel(R) HD Graphics
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key:
User Name: <redacted>
Admin Group: TRUE
Integrity: High
TimeZone: UTC-3
UserLanguage: Portuguese
Keyboard Language: Portuguese
Display Resolution: 1366x768
Wallpaper Hash:

cystack_bc033686

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, MachineID, Operation System, Processor, Product Key, System Language, TimeZone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

***********************************************
*         _   _   _   _   _   _   _           *
*        / \ / \ / \ / \ / \ / \ / \          *
*       ( O | T | T | O | M | A | N )         *
*        \_/ \_/ \_/ \_/ \_/ \_/ \_/          *
*                                             *
*  Telegram : <url>  *
***********************************************

  >=>>=>   >==>    >=>       >>       >===>>=====>     >=>    >=>    >=>          >>               
>=>    >=> >> >=>  >=>      >>=>           >=>      >=>   >=> >=>    >=>        >=>>=>             
 >=>       >=> >=> >=>     >> >=>          >=>     >=>        >=>    >=>       >=>                 
   >=>     >=>  >=>>=>    >=>  >=>         >=>     >=>        >=====>>=>        >==>               
      >=>  >=>   > >=>   >=====>>=>        >=>     >=>        >=>    >=>       >=>                 
>=>    >=> >=>    >>=>  >=>      >=>       >=>      >=>   >=> >=>    >=>        >=>>=>             
  >=>>=>   >=>     >=> >=>        >=>      >=>        >===>   >=>    >=>          >>               
                                                                                                   
>=>    >=> >=>     >=> >=>>=>                                                                      
>=>    >=> >=>     >=> >>   >=>                                                                    
>=>    >=> >=>     >=> >>    >=>                                                                   
>=====>>=> >=>     >=> >==>>=>                                                                     
>=>    >=> >=>     >=> >>    >=>                                                                   
>=>    >=> >=>     >=> >>     >>                                                                   
>=>    >=>   >====>    >===>>=>                                                                    
                                                                                                   
[... truncated; full sample at ``sample.txt`` (approx. 41 more lines) ...]

cystack_be979f63

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Display Resolution, Domain Name, Graphics card, Installed RAM, Integrity, Keyboard Language, Log date, MachineID, Operation System, Product Key, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 02 Jun 25 14:53 MSK
System Language: English
Installed RAM: 65219 MB
Operation System: Windows 11 24H2 build 26100 (64 Bit)
Graphics card: NVIDIA RTX A5000
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key:
User Name: <redacted>
Admin Group: TRUE
Integrity: High
TimeZone: UTC+1
UserLanguage: English
Keyboard Language: English
Display Resolution: 2560x1440
Wallpaper Hash: 0b18218a3d98e5d4a1e126f6aaad589b23e4d426

cystack_c1e6a3a7

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Log date, MachineID, Operation System, Processor, Product Key, System Language, TimeZone, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 03 May 25 10:43 CEST
HWID: <redacted>
Country: CZ
IP: <redacted>
System Language: Czech
Processor: 13th Gen Intel(R) Core(TM) i5-13400F
Installed RAM: 32607 MB
Operation System: Windows 11 24H2 build 26100 (64 Bit)
Graphics card: NVIDIA GeForce RTX 4060
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key:
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+1
UserLanguage: Czech
Keyboard Language: Czech
Display Resolution: 1920x1080
Wallpaper Hash: 63b94c518cd103b16216bd134ce8d4b010f52292

cystack_c47c7f16

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, Log date, MachineID, Operation System, Processor, Product Key, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 19 Nov 25
Country: AE
IP: <redacted>
System Language: English
Processor: AMD Ryzen 7 5800H with Radeon Graphics         
Installed RAM: 28524 MB
Operation System: Windows 11 23H2 build 22631 (64 Bit)
Graphics card: AMD Radeon(TM) Graphics
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key: 
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+4
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080
Wallpaper Hash: 0f8bee011383a069bd2d1fbd678fba86021b5036

cystack_c6375578

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, Operation System, Processor, Product Key, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: System.txt, UserInformation.txt

Sample (sanitized):

Country: AE
IP: <redacted>
System Language: English
Processor: Intel(R) Core(TM) i7-8650U CPU @ 1.90GHz
Installed RAM: 16227 MB
Operation System: Windows 10 22H2 build 19045 (64 Bit)
Graphics card: Intel(R) UHD Graphics 620
Computer Name: <redacted>
Domain Name: <redacted>
Product Key: 
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC-8
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080
Wallpaper Hash: 028f4ff456fd2615687e34bf4043bdbe5364a42e

cystack_cfd0ac77

Attribution confidence: unknown

Field keys: City, Country, Display Resolution, IP Address, Keyboard Language, Postal Code, Region, TimeZone, Timezone, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

TimeZone: UTC+1
UserLanguage: French
Keyboard Language: French
Display Resolution: 1920x1080
@stealerboss - Buy daily fresh logs: 06910c4592a8cbd656c109559b3e4ceaccd62148


                        IP GEOLOCATION DATA

IP Address:      <redacted>
Country:         France (FR)
Region:          Hauts-de-France
City:            <redacted>
Postal Code:     <redacted>


Timezone:        Europe/Paris (UTC)

cystack_d377db09

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Log date, MachineID, Operation System, Processor, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 05 Jan 26 10:35 MSK
HWID: <redacted>
Country: AO
IP: <redacted>
System Language: English
Processor: Intel(R) Core(TM) i5-10600KF CPU @ 4.10GHz
Installed RAM: 16292 MB
Operation System: Windows 10 Pro build 19045 (64 Bit)
Graphics card: NVIDIA GeForce GT 710
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+1
UserLanguage: Portuguese
Keyboard Language: Portuguese
Display Resolution: 1920x1080
Wallpaper Hash: d08c477d7682cd97be0a55cf613fdf56c9c08923

cystack_d5e7e4a8

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Log date, MachineID, Operation System, Processor, Product Key, System Language, TimeZone, Traffic, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Log date: 16 Mar 25 15:36 UTC
Traffic: @MAXERSTE (BRADMAX) / <url>
HWID: <redacted>
Country: TH
IP: <redacted>
System Language: Thai
Processor: Intel(R) Core(TM) i3-6100U CPU @ 2.30GHz
Installed RAM: 3995 MB
Operation System: Windows 10 22H2 build 19045 (64 Bit)
Graphics card: Intel(R) HD Graphics 520
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key: 
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+7
UserLanguage: Thai
Keyboard Language: English
Display Resolution: 1366x768
Wallpaper Hash: 

cystack_d7d05872

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Operation System, Processor, Product Key, Router MAC Address, System Language, TimeZone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

HWID: <redacted>
Country: LU
IP: <redacted>
TimeZone: +1
System Language: German
Processor: Intel(R) Core(TM) i5-9400F CPU @ 2.90GHz
Installed RAM: 16299 MB
Operation System: Windows 11-10.0.26200
Graphics card: NVIDIA GeForce GTX 1660 Ti
Computer Name: <redacted>
Router MAC Address: <ip>
Domain Name: <redacted>
Product Key: 37GNV-YCQVD-38XP9-T848R-FC2HD
-------------
User Name: <redacted>
Admin Group: TRUE
Integrity: High
UserLanguage: German
Keyboard Language: English
Display Resolution: 1920x1080
@stealerboss - Buy daily fresh logs: 7edf68c495f6fe8b8001a36c9ea0b65040a2d0a7

cystack_d9d3b27b

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Display Resolution, Domain Name, Graphics card, ID, IP, Installed RAM, Integrity, Keyboard Language, Operation System, Processor, Product Key, System Language, TimeZone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

***********************************************
*         _   _   _   _   _   _   _           *
*        / \ / \ / \ / \ / \ / \ / \          *
*       ( O | T | T | O | M | A | N )         *
*        \_/ \_/ \_/ \_/ \_/ \_/ \_/          *
*                                             *
*  Telegram : <url>  *
***********************************************

@OttoSup - Buy daily fresh logs
FREE Cannel @OttoSup - Buy daily fresh logsuy daily fresh logs+bb05-sfS9ZdkMzEx  *
@OttoSup - Buy daily fresh logs

    Country: MX
IP: <redacted>
System Language: Spanish
Processor: Intel(R) Core(TM) i3-3217U CPU @ 1.80GHz
Installed RAM: 8067 MB
Operation System: Windows 10 22H2 build 19045 (64 Bit)
Graphics card: Intel(R) HD Graphics 4000
Computer Name: <redacted>
Domain Name: <redacted>
ID: @logadm
Product Key: 
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC-6
UserLanguage: Spanish
Keyboard Language: Spanish
Display Resolution: 1366x768
@OttoSup - Buy daily fresh logs: 9ba14c26fe5d0d2cf71bc09a782dd7ca246d212a

cystack_dfdae098

Attribution confidence: unknown

Field keys: Admin Group, BUILD NAME, Computer Name, Country, Display Resolution, Domain Name, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Operation System, Processor, Product Key, Router MAC Address, System Language, TimeZone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

BUILD NAME: bigdick
HWID: <redacted>
Country: LT
IP: <redacted>
TimeZone: +2
System Language: Lithuanian
Processor: 11th Gen Intel(R) Core(TM) i7-11800H @ 2.30GHz
Installed RAM: 16085 MB
Operation System: Windows 11-10.0.26200
Graphics card: Intel(R) UHD Graphics
Computer Name: <redacted>
Router MAC Address: <ip>
Domain Name: <redacted>
Product Key: YC7N8-G7WR6-9WR4H-6Y2W4-KBT6X
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
UserLanguage: Lithuanian
Keyboard Language: English
Display Resolution: 1536x864
@stealerboss - Buy daily fresh logs: 796700034cea479d51a9e6e33dad79adf168bafd

cystack_e5cf90e8

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, MachineID, Operation System, Processor, System Language, TimeZone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

***********************************************
*         _   _   _   _   _   _   _           *
*        / \ / \ / \ / \ / \ / \ / \          *
*       ( O | T | T | O | M | A | N )         *
*        \_/ \_/ \_/ \_/ \_/ \_/ \_/          *
*                                             *
*  Telegram : <url>  *
***********************************************

Country: CO
IP: <redacted>
System Language: Spanish
Processor: AMD Ryzen 7 4800H with Radeon Graphics         
Installed RAM: 15791 MB
Operation System: Windows 10 Home Single Language build 26200 (64 Bit)
Graphics card: Unknown
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC-5
UserLanguage: Spanish
Keyboard Language: Spanish
Display Resolution: 1536x864
@OttoSup - Buy daily fresh logs: d08c477d7682cd97be0a55cf613fdf56c9c08923

cystack_e9c9d718

Attribution confidence: unknown

Field keys: Country, Graphics card, HWID, IP, Installed RAM, Log date, Operation System, Processor, System Language, Traffic, Version Build

Filenames: UserInformation.txt

Sample (sanitized):

1234

Log date: 14/03/26 17:31
Traffic: jakoer228
Version Build: 1.0
HWID: <redacted>
Country: PL
IP: <redacted>
System Language: Polish
Processor: 11th Gen Intel(R) Core(TM) i5-11400F @ 2.60GHz (6 cores, 12 threads)
Installed RAM: 15.86 GB
Operation System: Windows 11 (Build 26200) (64 Bit)
Graphics card: NVIDIA GeForce RTX 3060

cystack_ea2cf1f2

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, MachineID, Operation System, Processor, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

    Country: AR
IP: <redacted>
System Language: Spanish
Processor: AMD Ryzen 5 3400G with Radeon Vega Graphics    
Installed RAM: 15293 MB
Operation System: Windows 10 Enterprise build 19045 (64 Bit)
Graphics card: Unknown
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC-3
UserLanguage: Spanish
Keyboard Language: Spanish
Display Resolution: 1920x1080
Wallpaper Hash: d08c477d7682cd97be0a55cf613fdf56c9c08923

cystack_ea6a2985

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, MachineID, Operation System, Processor, Prodct Key, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

    Country: JM
IP: <redacted>
System Language: English
Processor: 12th Gen Intel(R) Core(TM) i5-1235U
Installed RAM: 11956 MB
Operation System: Windows 11 24H2 build 26100 (64 Bit)
Graphics card: Intel(R) Iris(R) Xe Graphics
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Prodct Key:   @ logs_russia   
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC-5
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080
Wallpaper Hash: 0825e886///  @ l o g s _ r u s s i a  ///4c47e6 49d8b8245dea194637ebc808ba25f0d3590f78be

cystack_ee3d861c

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Country, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, MachineID, Operation System, Processor, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Country: AR
IP: <redacted>
System Language: Spanish
Processor: AMD Ryzen 5 8600G w/ Radeon 760M Graphics      
Installed RAM: 31943 MB
Operation System: Windows 10 Pro build 26200 (64 Bit)
Graphics card: Unknown
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+0
UserLanguage: Spanish
Keyboard Language: Spanish
Display Resolution: 1920x1080
Wallpaper Hash: d08c477d7682cd97be0a55cf613fdf56c9c08923

cystack_ef4e0d1b

Attribution confidence: unknown

Field keys: Admin Group, Computer Name, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, MachineID, Operation System, Processor, Product Key, System Language, TimeZone, User Name, UserLanguage

Filenames: UserInformation.txt

Sample (sanitized):

***********************************************
*         _   _   _   _   _   _   _           *
*        / \ / \ / \ / \ / \ / \ / \          *
*       ( O | T | T | O | M | A | N )         *
*        \_/ \_/ \_/ \_/ \_/ \_/ \_/          *
*                                             *
*  Telegram : <url>  *
***********************************************

    Country: KH
IP: <redacted>
System Language: English
Processor: Intel(R) Core(TM) i5-10200H CPU @ 2.40GHz
Installed RAM: 16291 MB
Operation System: Windows 11 24H2 build 26200 (64 Bit)
Graphics card: NVIDIA GeForce GTX 1650
Computer Name: <redacted>
Domain Name: <redacted>
MachineID: <redacted>
Product Key: 
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
TimeZone: UTC+7
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080
@OttoSup - Buy daily fresh logs: bd0557876e6e79441042633c4987486390b7bbcc

cystack_f3954c4a

Attribution confidence: unknown

Field keys: APPLE, Admin Group, BUILD NAME, Computer Name, Country, Display Resolution, Domain Name, GOOGLE, Graphics card, HWID, IP, Installed RAM, Integrity, Keyboard Language, Operation System, Processor, Product Key, Router MAC Address, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

BUILD NAME: bigdick
HWID: <redacted>
Country: HU
IP: <redacted>
TimeZone: +1
System Language: Hungarian
Processor: 11th Gen Intel(R) Core(TM) i5-11400F @ 2.60GHz
Installed RAM: 16248 MB
Operation System: Windows 11-10.0.22631
Graphics card: NVIDIA GeForce GTX 1650
Computer Name: <redacted>
Router MAC Address: <ip>
Domain Name: <redacted>
Product Key: GNKHT-YC997-R8DK2-Q9X27-KHJVG
-------------
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
UserLanguage: Hungarian
Keyboard Language: Hungarian
Display Resolution: 1920x1080
Wallpaper Hash: 8686086517fc6b01b38f06f528853cdbf7ab5694

=== GEOLOCATION ===
APPLE: 47.488346, 18.925955
GOOGLE: 47.488052, 18.925849

cystack_fa688f82

Attribution confidence: unknown

Field keys: Admin Group, Country, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, MachineID, Operation System, Processor, Product Key, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: UserInformation.txt

Sample (sanitized):

Country: AE
IP: <redacted>
System Language: English
Processor: AMD Ryzen 7 7735HS with Radeon Graphics
Installed RAM: 15610 MB
Operation System: Windows 11 24H2 build 26100 (64 Bit)
Graphics card: NVIDIA GeForce RTX 4050 Laptop GPU
Domain Name: <redacted>
MachineID: <redacted>
Product Key: 
-------------
User Name: <redacted>
Admin Group: TRUE
Integrity: High
TimeZone: UTC+4
UserLanguage: English
Keyboard Language: English
Display Resolution: 1920x1080
Wallpaper Hash: 6412be3b177b930d4013957d032f6022506f40ff

cystack_fc732c97

Attribution confidence: unknown

Field keys: Computer Name, Country, Domain Name, Graphics card, HWID, IP, Installed RAM, Log date, Operation System, Processor, System Language, Traffic, Version Build

Filenames: UserInformation.txt

Sample (sanitized):

1234

Log date: 22/03/26 22:08
Traffic: arlekin
Version Build: 1.0
HWID: <redacted>
Country: US
IP: <redacted>
System Language: English
Processor: Intel(R) N100 (4 cores, 4 threads)
Installed RAM: 11.78 GB
Operation System: Windows 11 (Build 26200) (64 Bit)
Graphics card: Intel(R) UHD Graphics
Computer Name: <redacted>
Domain Name: <redacted>

cystack_fddd76ee

Attribution confidence: unknown

Field keys: Admin Group, BUILD NAME, Computer Name, Country, Display Resolution, Domain Name, Graphics card, IP, Installed RAM, Integrity, Keyboard Language, Operation System, Router MAC Address, System Language, TimeZone, User Name, UserLanguage, Wallpaper Hash

Filenames: System.txt

Sample (sanitized):

BUILD NAME: bigdick
Country: PL
IP: <redacted>
TimeZone: +1
System Language: Polish
Installed RAM: 16280 MB
Operation System: Windows 11-10.0.22631
Graphics card: NVIDIA GeForce GTX 1650
Computer Name: <redacted>
Router MAC Address: Unknown
Domain Name: <redacted>
User Name: <redacted>
Admin Group: FALSE
Integrity: Medium
UserLanguage: Polish
Keyboard Language: Polish
Display Resolution: 1920x1080
Wallpaper Hash: f92cc32710e53b9bc7093103923e1c2ac1eff6e4

Detection

Confidence triggers, in increasing order of certainty:

1. Plain Operation System: field (note the typo) is suggestive but matches several stripped-down clones.
2. Operation System: plus the channel banner (e.g. ===DARKSIDE_BRAND_BEGIN===) is high-confidence RedLine.
3. Operation System: plus Admin Group: plus Integrity: is the unambiguous RedLine extended-block form.

Pair with browser-credential file paths (Login Data, formhistory.sqlite) and Discord token grabber output to confirm in incident-response triage.

MITRE ATT&CK

• T1555 Credentials from Password Stores
• T1555.003 Credentials from Web Browsers
• T1539 Steal Web Session Cookie
• T1119 Automated Collection
• T1005 Data from Local System

Related families

• vidar
• meta-stealer

References

• https://www.esentire.com/blog/esentire-threat-intelligence-malware-analysis-redline-stealer
• https://github.com/MalBeacon/what-is-this-stealer