Extracted

• • Target
    file.exe
  • Size 339KB
  • SHA256 00a281e4d90eec2cbf82aadf81a2d46d32e950b96883faa87a674276218a926f
  • MD5 bf337b3888fa89362aab5bb2f31df79e
  • SHA1 bd5800bd1796a4d138adc256fc1e9b38aff522fd
  • SHA512 ca53187a375867a5dceebd4512df074be69544d9b106750353e04f95a0fa6c64f3dca6d6dd952757599b58a336db86c9be823cc32e8c454981a75bf98769708c
  • SSDEEP 6144:73SKLPTqMO0ysa9vWspb/rsSehn8C6ou0/WNek4MB:7RjTqMOdhtk18XoJj
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzkidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2