Extracted

• • Target
    file.exe
  • Size 314KB
  • SHA256 cbf67382691c0481e0c30872f7ead0b273dcf60065428ef58cd074e062d42c51
  • MD5 9ded5f6adedeb8d31de67dd44c876c23
  • SHA1 d47b356c265b8d32a9626c50ae4a9ad3cc0b591f
  • SHA512 139edf7d30e14681cf0a23b4ee9af030d35814f3805a01e9320343b3d5245246f890a38c678645be626425653a05f530664500ed423ff0d87c5e3daba8000643
  • SSDEEP 6144:PL8DABI///lETllMgTVvwUh6bTkQKARVSLA5:PQDABlIUDJ4
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzkidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2