Extracted

• • Target

    AutoInstall.exe

  • Size

    1.8MB

  • MD5

    d22dea0339065ec05cccf525b72a7b12

  • SHA1

    fb73af59c4498f28ffd714d467551ec465b77d7d

  • SHA256

    92cf7bd32bc8125a758cafd97fc06559994b57ed94f641f74f2da07de284aff3

  • SHA512

    9b947179aac2233f83e24f5892aeeba2aa2240f5bf32d323395e712ae02844b04e56abbea16e6e7c34559b7a4ad5ab53a9049bf6eb2a31cbcb59be180dfde573

  Score

  10^/10

  metastealerredline@sdsaads2infostealerspywarestealer

  • Meta Stealer Stealer

    Meta Stealer steals passwords stored in browsers, written in C++.

    stealermetastealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2