Extracted

• • Target
    file.exe
  • Size 340KB
  • SHA256 9196e2ea75f58e3fcdb0905b89785659b46c1068da7589e5284680256e89096b
  • MD5 c7bbb5f870c4e4962d28104ceac79516
  • SHA1 78ce01e766eeea54a10224979b499cde70bda062
  • SHA512 79b826bbb369e805214d79d30f1639b5af9d47017f91b1064f4d545868e02fb92a940865692329641bde5b921b819cfd8187e700e3567a6ceca5e03a39e625e6
  • SSDEEP 6144:EC2LsGTki7gvbthgylhlTcI/gksSYL5lFO7C9ZEDkd/bDdIYbqO:EC27TkogvBmylhlbsS2b9nd
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzkidiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2