Extracted

• • Target
    file.exe
  • Size 346KB
  • SHA256 fc5fc1fff3e4ce077a282bc70c42445c6d4232017dea7435e09ebe549c9d3048
  • MD5 521e4876ca2e21143c2f571195043029
  • SHA1 d81276f3b67109070cd4383c86266f2bd80a5a83
  • SHA512 9ee5b4413401c1046eadcc9e7382cc8d0e01762ca8a07f5cd795a6f18ef90ebc495a040ef3fed98882bdf3df56abd3e33791816186cd4c7ba80da8600c1c35a6
  • SSDEEP 6144:7q2gisVNekvMv4nunWGCLv1Sy4bKsLATsi8ftSd:7q2gisVNMv9ngvd4bvLA0
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2