Extracted

• • Target
    0873de7fb11da0d59ad4d0c76f7af111.exe
  • Size 333KB
  • SHA256 35496a5d66aa3713b2898f4cc899b2dbb69cb4ba24f535e896f2cfcfc47ab5b1
  • MD5 0873de7fb11da0d59ad4d0c76f7af111
  • SHA1 6ca1010f5c88c89d4c011776ee39129f28293d7d
  • SHA512 b1d314de4b0d97d7800afc9eeb71720cab149c6011772dde9f1860824c07d8283026e9ecb9a94f48d49f9a0a9d2eb4108e73b21a76ade6c8913030f064083f02
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineruzkiidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2