Extracted

• • Target
    file.exe
  • Size 503KB
  • SHA256 ff0a5b28b8e86e8f873adcdcc01d36daea6afd5031d9644f71837e1de2e7d875
  • MD5 7feacb472ad55a08c38bbf3accd1888f
  • SHA1 d1be072f3cdbe4085eaef8b20857ebe94151c9f1
  • SHA512 dcdc9ac0d66c17c2c8a0c7927f33e1f5e0ae2950b5fad0ac4c5689a03207c6f899032f7639e69134c1e3ef469352a54c4daf8e2541851013f857602417d9b19a
  • SSDEEP 12288:iRSt7e05vXRgwf1EdmUwl1/WlR98GPDI+6:iRl0hhCiOGG36
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzkidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2