Extracted

• • Target
    file.exe
  • Size 503KB
  • SHA256 f2cc2dc4260006c10df0349d74f4d2a182e696e42eae6d5321e77da6ac488e27
  • MD5 833f31ce4c00a98173cf5e4fbdb6714b
  • SHA1 72d9f0a8d1de38512330a11062d9106500fe64a9
  • SHA512 46cb6d224f1f69eb3d484fc5dbd3d390154ff707614164c11a0099e9947d4a25d225f1be61f146bfec938a13b0e0434a30ad237553a215fee7f4813507e770bd
  • SSDEEP 6144:lzXWIFuSLiX6QhENs1seWmIvlHQhX6m5UPR9dtOBRJL6M9vdpWYuxKmxXwOu1ql:lzGsGX6y11+QR2LwJLz9vvFxuUql
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzkidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2