Extracted

• • Target
    edba73d9fec3746cdfa154ef3dc0d368.exe
  • Size 383KB
  • SHA256 9fd81825d63ea65fafe9ce234eea9459487a5408bed2a9df0158b45be4be7553
  • MD5 edba73d9fec3746cdfa154ef3dc0d368
  • SHA1 f6670bde0cce19a2b95eb93b887ac1b6194fb837
  • SHA512 d51de33cb01dc95a6f1b961ffd779a378cb505d20eb30d4ad0e319df65eee4bc35a6133002448fd1c8ea49a4b63198ba09bcf3e8d77654776bb4c6e9d624b018
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineruzkiidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2