Extracted

• • Target
    setup.exe
  • Size 352KB
  • SHA256 cac62a925e9aedc73680e8a9ab66c583595d8ddb2dce9275f0ad537557aaeefa
  • MD5 ccec4d402470ea5e7f1d7876943c2fab
  • SHA1 38e3ecb95f1875ac7e772e1027af24885a72b29c
  • SHA512 c8cc239db5d9170480baac5433e591d449ab683d09ea93df10d085772481136a05f655d32925a68b5f71dad9a47f75b14eca4ce02d5a0d48e559369bb76d31e1
  • MD5 SHA1 SHA512

  Score

  10^/10

  redline0308santadiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2