Extracted

• • Target
    file.exe
  • Size 340KB
  • SHA256 1af5f28400a157a1c799218e3905bfce82e58b80294727b17efea86e742bf7c6
  • MD5 f26fb59340639c6353c3b7309f86c7a4
  • SHA1 78734a1351cb9d681222926e5ac52b8e56629341
  • SHA512 342bf229e7f2929094564f5f16a444f166c13a08c6f0e6f98341ddb6fc3eb4bb62c7015f0470cf62df11ea9ed40fd13bc77335cd43b98b3afe17f38bac0359b3
  • SSDEEP 6144:0AYlwLdMYKllTemntnhkUVtRhw1ANLj45n60bCJ2G6:0lwpMYnmAE1w1ANqfmJ2
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzkidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2