Extracted

• • Target
    dbfa9fff5ffa305dabf97225b28179ac.exe
  • Size 383KB
  • SHA256 b0a9dc5fc6540a18e31730fc83ed42cbeec8c04c70d123265ee1c54710db0fde
  • MD5 dbfa9fff5ffa305dabf97225b28179ac
  • SHA1 5ace89df971f4f872c23e2a7f5514e0a46340c02
  • SHA512 a903bc3d665879ab05aad44e79e2748a250636a92a96dcc12e737811e8fed3c9736f091d40f108fe6f4b92d2b6b994fc0a9dc166d9e523bc8a4f583e26b50d21
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineruzkiidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2