Extracted

• • Target
    file.exe
  • Size 346KB
  • SHA256 0d928e2799f57ec84b7cf05c7f0e1093a6b59db8849e650b9cdc3fb960cd9e4b
  • MD5 4b387d24280c465ed4f06b6da2a18a26
  • SHA1 b325e3e87e1642e6bf631a59894b80e4f8f18aa9
  • SHA512 0d83fe3252e07258b8aafe8f8ef42911d931b0f1b496ca3cb6e91c6b2ba6e99555877e51f6538e07eba29f72804fc9339a8c20a0d6a543e29c12f26355ab002c
  • SSDEEP 6144:3ulDJ+dVexPH68ql7pmWigFEsN+xwmvzhIKYtu3ShEDPMky52UvR95CO:3ulQVexPHIRpmWNFgxwmGKYtwOz8O
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2