Extracted

• • Target
    file.exe
  • Size 339KB
  • SHA256 03d475b96b2235ed0055f401766d0586f377e14ada8cf67eda53beaa1dec449b
  • MD5 4574f7e4c094043ff4b79d3606bbacea
  • SHA1 57ae096e16930aa95e0f11e0291a0e7efc34b669
  • SHA512 0d84eb5628a5daef424b0d29ea104e559c5a7820a05925572ef3385d8344206b042b1e51bdf67fcc635644b8b5b3005653989de3544e084294112f32a1c8c2c5
  • SSDEEP 6144:d8bLZvhO4sOUrpccTWuf93OFZTlAntgdmgmfwEkpM:dU1vhO9Oepc8uT0tAmgCV
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzkidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2