Extracted

• • Target
    dd843167036a75a13ea23f8be8322f65.exe
  • Size 390KB
  • SHA256 1fb2b93ef28594e6da5fdf8d7f782bf692675ceea83c5bbd1ce3548070e5fbc3
  • MD5 dd843167036a75a13ea23f8be8322f65
  • SHA1 86c8a9fae21fbd49fbeb7da467c1208eeafed944
  • SHA512 ea789b63672a62d810acd02c0b0dcea8ae38986bb50aa69787d6a1ccf756270929e5f60013323850c5b4f99a1b8e99c51c03c8e20c2ac800188f5015dd3302e4
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineruzkiidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2