Extracted

• • Target

    0509e402f91749138b5aa6926dd601a2.exe

  • Size

    1.8MB

  • MD5

    0509e402f91749138b5aa6926dd601a2

  • SHA1

    8b6e4742e6a500b680a4e7f19ac79ce4f0cf56e8

  • SHA256

    882afd11444de44ba72dcd4fd7fc523c74e8679636209db706e0ec7301c4bfe9

  • SHA512

    21590179d6b9e6c141cfece9d2790e7802c0582e782115b79dccea0cc711e5d8f34ca38567252424e63a27a1d61ccdfce4fee343c69fffeb8f8bb993051d4dfe

  Score

  10^/10

  redlineevasioninfostealerspywaretrojanmetastealerstealer

  • Meta Stealer Stealer

    Meta Stealer steals passwords stored in browsers, written in C++.

    stealermetastealer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2