Extracted

• • Target
    3b686cc1989c845c66c604f9dc9731d7.exe
  • Size 334KB
  • SHA256 2df8d91f6242c44a553038fd580bf50a0c39588ece4ae7a7e0b5d2001e7808ca
  • MD5 3b686cc1989c845c66c604f9dc9731d7
  • SHA1 0e7b0829c78d964ba214e4f7c0e9ae083f74e4d2
  • SHA512 5ed493d960f303717bd92bbc7191e37641fa4d92ce88e50cfa0f58b65af68fff9020de230d6066223864eb771dd5e02684a0196699ccbfe0a12bb9b7a20dcc01
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineruzkiidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2