Extracted

• • Target
    AutoInstall.exe
  • Size 1.8MB
  • SHA256 92cf7bd32bc8125a758cafd97fc06559994b57ed94f641f74f2da07de284aff3
  • MD5 d22dea0339065ec05cccf525b72a7b12
  • SHA1 fb73af59c4498f28ffd714d467551ec465b77d7d
  • SHA512 9b947179aac2233f83e24f5892aeeba2aa2240f5bf32d323395e712ae02844b04e56abbea16e6e7c34559b7a4ad5ab53a9049bf6eb2a31cbcb59be180dfde573
  • MD5 SHA1 SHA512

  Score

  10^/10

  metastealerredline@sdsaads2infostealerspywarestealer

  • Meta Stealer Stealer

    Meta Stealer steals passwords stored in browsers, written in C++.

    stealermetastealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2