Extracted

• • Target
    file.exe
  • Size 440KB
  • SHA256 3bc3b5c9529e04a34caf65feac6fb1ff043c1f03a8fc64b6365ffc68dfd0ac8a
  • MD5 2f6aee751e8a956f679a7f78be31e499
  • SHA1 00d35f74625ab5e8c1463eae5ffb00f94084320e
  • SHA512 5e1bfd60847aa286f527f77dabadf50253b54dce58794b4d750342988d8e39e66935b776a1ef3e175a73cccdbd162fba301696abf327eda883d93d97f308c2b4
  • SSDEEP 6144:YaMFLPqcOBuAVq3yF5q89AnqFadhq7X5Eyh4DhTDfojG2uz6KMUYd4En2E1a:YaYGcOB1F5q89Yh2yyh4DOG2uzzg4Uv
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2