Extracted

• • Target
    file.exe
  • Size 366KB
  • SHA256 54ddc1748ff5e36fb993d4b7da368457be704f84e26a533a3a1c6c3e41ab839e
  • MD5 d5fd39d814d6d704eeb5079049187426
  • SHA1 70bc10da2a3dbaae3fc0b67685e789bd54a1904f
  • SHA512 c5d3741649b840f39461e2efaa9f52acfea1231b318bb8cbc0c9a41f90e2b43b96dfe077b139d3bd4720047653495400bcf4f67a7c1aa950ca97838cb0258a27
  • SSDEEP 6144:nKJOELB1qA4Kxm3yBjcdBF6l7qGplTgbT2Xx5qkQqXAm:nKJdF1qAtxmucDF6plTaT45qQQ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2