Extracted

• • Target
    448b52bfc7b7b495c9acbaac75672ffa.exe
  • Size 332KB
  • SHA256 962e0c4c6b44341e4bd447edf7432cdbe87bd0f0ccf2b61f508765c0943c4de7
  • MD5 448b52bfc7b7b495c9acbaac75672ffa
  • SHA1 2d37d80939c031e1cb5699e4ed4e31b82de90d2e
  • SHA512 0f4a35d8a4f7ec9562c8135b414b1620ed45ec549f4216f0b12ce1517ac93fea8af5c231a79b20c242ccbad5181eea1a3bb3b2b1340ecb93006d8cc689e6677b
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineruzkiidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2