Extracted

• • Target
    file.exe
  • Size 339KB
  • SHA256 9d9e29c6de3084c98fede63a4917dadd2928ed44321710feb4f6ec9d4c0e36d2
  • MD5 23209117a37825d5c664f811f2b11623
  • SHA1 386c7418c482c122de22392803f278545aca4012
  • SHA512 be8b14c53daa96f1280f7a655384659db08d788ca612a463d02dbc205dabe979268fc5d69aee27c105df9c5567dd4d8be2031c1971a4f8817a95e3ae8f9b9af4
  • SSDEEP 6144:aCLuN7S+Igj1WYd1UVp6OIWvGDdXMufn0wmCWef9:HKS+V1Vd1UVJvcdcK0a
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzkidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2