Extracted

• • Target
    file.exe
  • Size 503KB
  • SHA256 ea107aced2f858b3925ac4e522693bba0ea0c7d16ef4580ca5cb15a69f2e487a
  • MD5 5a343e4f13973c6073796f698fbc4285
  • SHA1 f43350424f202d52bde79767e0d65514b88f0013
  • SHA512 08b4a3730bd54223e641ef1b415cd6922a0c8c71a2324150f59cccb30493f3a7096a42e38ad839da650ef440d98920cd383b0bae8eb710f3a7c581f76345658b
  • SSDEEP 12288:waWyAf4xN2mN4rcJemZarLHbQs/tGi6DI+6:wajLx9NMcJeCaPb3tGiw6
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzkidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2