Extracted

• • Target
    99802519b61ef7030edaed827c56bbb9.exe
  • Size 400KB
  • SHA256 30e41f3fbec0edd2937b7d1aa461fd9d3e3b8928ffbda3a98629140b89ec5085
  • MD5 99802519b61ef7030edaed827c56bbb9
  • SHA1 c7fc404e653ed735758a4fd95e6dd49f6e0d4ad4
  • SHA512 37ad4af3c6dcd8b7a135b8dfb11cb40ebd63a12c0b1d88d9cc14d854dcaee974bdc7ac81f1b3ed1bb71936580f2bc5e052f0cd572791fca896870a0b0d2db0d6
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineruzkidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2