Extracted

• • Target
    9a2f69da06c694d0f380cae6df185165
  • Size 412KB
  • SHA256 3b4c19970875da5f70690fd8fb319b3a9d62f3476ece49dcc95140d037bf148b
  • MD5 9a2f69da06c694d0f380cae6df185165
  • SHA1 681c907ae5776dbdba6e3dc9299f21547236e118
  • SHA512 e305dc59aa6b4c6e8510331b271c9fc9c7f0182a57328f741bd045b252ccff22102b69919f03f73b0be48df1ce8cb07a42ee83a348b46c2eef76e75f7cf5b706
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineruzkidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2