Extracted

• • Target
    file.exe
  • Size 347KB
  • SHA256 5f4a228980e2d265e4137c2be240932b5d3725ace66afbb10af7fcf27d483fe1
  • MD5 ea30cf16058d815520b05dca8c8488d2
  • SHA1 a4e8f8832157270674f3dc27765ac8cafb6a5f79
  • SHA512 581189db2dfb960e78af99992b8b56bff7145a2f756fd9f747df673a4a47bad0e1402d41ceb04b8c2f057c3d6d7ca0e8847bed72d6073ec86fe8c868b869f170
  • SSDEEP 6144:pAoZdgCEFomZvS3u196vmVGJ0o2jX/UTU1Zrc4V:pVZdgCEFow714j87R
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2