Extracted

• • Target
    file.exe
  • Size 340KB
  • SHA256 1830f7814962b9bb4e84703f429bb42e7575a2b060957f267903b161cf4b371b
  • MD5 63cf8a991cc2ec36b962f2a2bc75ead8
  • SHA1 acf789daf7269ef0c9f65e1707c9d90232742ba9
  • SHA512 ed00c730b4e7c82da4a2aecd9f4e0e3aaa74731b13625f91ee177c0a69bb5d25ef25dab4396c9e065bdf3047a5a8df0cf1fe7425e0da77a5a34906d1c60ea448
  • SSDEEP 6144:2W2vL6SGO2zBhUSX/Ho4On0qx+QJf46mVxi/TGlZVx6K:2l2SGO2zHUGc0qx+Q5CA7Glr
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzkidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2