Extracted

• • Target
    file.exe
  • Size 346KB
  • SHA256 0d8addfdfedb5494162021c574e524bb28526d783e6ea7cf238418f2652074b9
  • MD5 3edfece1c16aaa3048fa0faa6e30b58d
  • SHA1 a84dcc4f6150c45bcb5f3452f5cb76b144ab131a
  • SHA512 fb1b3d110e1ed2e0aaa50f2a9ca04def118d4d44b3c4ca2e226241fe5d6d1e181ceea0cb40f7be11d6f5c7cbec586186134b5c9a559f8d5d5da562605637f1ce
  • SSDEEP 6144:+gbWYhmxJJi4x5444LMGQmXmPMQ6KJakv+dqW/jwUI4LOLz:DbWYhmggQLqmXmPL6MaMPW/EUIae
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2