Extracted

Extracted

• • Target
    Genshin Hack.exe
  • Size 341KB
  • SHA256 b964ae40cbc0dd892a8210187d7198c6a946e5dee5f2b54efc43dc6da7cab1f6
  • MD5 85ac18793faef760b8f16b15e6b6ccd2
  • SHA1 45bde0c5d9666ef22a5fc1959025f494ffd3d028
  • SHA512 dbedeac7ad29eb97a2241dc4b81b9c7530a790c5a938fa9599bc6c4a12a414758521b4ce11ce3f511ba22bbfef816a9bc894e438aac4c9bc825c5a0cdee0cd19
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinediscoveryinfostealerspywarestealerxxluchxx1

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2