Extracted

• • Target
    ae184d4b4d5c4dc82213dc987b601c9a.exe
  • Size 400KB
  • SHA256 5efd97d8a27ce824b58ef7fd5c837e40d4df1399ea22bcfe67a414821d5cb525
  • MD5 ae184d4b4d5c4dc82213dc987b601c9a
  • SHA1 5352c4ab2352924b7e0674fba3f162f5e00be75c
  • SHA512 064c71787e4f7add05c060d88691697122871750416e421d6b3fb459a2752fad48c19f9311aca9b7963a17f66db9c815161cbc4aee2785eb1d37b110a1bfe553
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineruzkidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2