Extracted

• • Target
    file.exe
  • Size 340KB
  • SHA256 d22dbf6ffaa26c5423b52934a9aea676e9919902e95b418538d760e746c7ee8a
  • MD5 b35b61426a4bdcc3db21bb9937082d98
  • SHA1 798cac3537852a30570ea3f1ecc1fc1e3ec27281
  • SHA512 3f79020f1e8b6e1ef47b9c47db98e296cb501ea113b93392896f2fc89e1b57cbe76751c7bf496b5229b459a8de4cdd779d3c0da65c02f6cba7717578d1ae6b3e
  • SSDEEP 6144:46LDTjTKkAJZPsyrHzWMfTSZWAR2D8kyp1zm+OVai:46DjTfyrHzWMHeTnphrmf
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzkidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2