Extracted

• • Target
    file.exe
  • Size 340KB
  • SHA256 d37ac898f63d972736b377d46e7adcb4057b991103ee779a253566d7a76ab0a3
  • MD5 1f47d7f7bdf3a7df231e558d9c15cdd9
  • SHA1 651f42544ef7301a8bdb6ecbcdd63b442583d02a
  • SHA512 7decbc90e69dc9f10b4063befd554d49e08704310805800f5e568a1fdc6d07e41ed05298a2255552f44876da202138e1ce4ba01150cc324235933f6f61b66d2b
  • SSDEEP 6144:LVjLpR0SawgC54F+hiVJpakR52KUt8xEIUn1xMQx4+Nd296VgcIpin2q:LVj1+SaZ84Fss/sKUt8xEIUnn/4+X2oJ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzkidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2