Extracted

• • Target
    OneWay Hack.exe
  • Size 985KB
  • SHA256 ac8bc27c6868bbb4b617b4280d8e400e6c9dda52c3ffda8a5603fe378374f69e
  • MD5 40b665edf189e012f4350dbe045e17ce
  • SHA1 972938468529ed4e0517dbb162559faf78ea8836
  • SHA512 305fedf65e0e656065458f2ac77b7bbcb1b6734b1a4b1ee8a6cc7056b8e3c9b070060752167b0a6f4116135dccc867be9dffaef419c2cb5c7778fdda257fa49d
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinediscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2