Extracted

• • Target
    file.exe
  • Size 447KB
  • SHA256 9d84a9c8c5e9f9b983cece0f36b4e6adb72f573bbf7a683c5c6ec5eca3841447
  • MD5 fd0c71870385e350cd46e0796f0bf001
  • SHA1 0a4aa2c27fa319a1fb11a91cac3630f3bb600896
  • SHA512 7fe97a7190391c6d8a5734443db422285cb3a7373be9068a28bf082370cec86f81dff12c520a21131f2311611e1b8515a57fc9381cc171e1523f3572b6b5bfdc
  • SSDEEP 6144:pDJYcrLcxdTgIq+LxQ0ZxEoQunVnFv0VSOERL94cgYwWQnSMkkgX77eEn2E1aJ:p1YaYxdTFq0KqEDMvs7c08PeUv
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2