Extracted

• • Target
    file.exe
  • Size 347KB
  • SHA256 3e617c520c6a753466b4bb72407280f8eb1cd7682a016c243dd38ffa7ba912eb
  • MD5 83f79d83352070e91765950b1ae81c16
  • SHA1 593185668a4f6b93d3c78639f484378f03c35ef7
  • SHA512 a918896a6594661632b36cfea40bbc55285114ae80217cde4ee63be1fe759493bde3afe2238be63c4bf4a53a9854d7e68dc0733b85ae80918adb19eec1080b38
  • SSDEEP 6144:+B5JMv0ES04DLNrAza/A/Gtdn0N8kQC7VVjyiqqpLJJUtP:+B5J40Ev0SzaI/GtCNTQxkLJ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineneruzdiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2