Extracted

• • Target
    setup.exe.exe
  • Size 4.4MB
  • SHA256 e97c06fddcb4bc7c94855da7044d64d45f3b9eba58e58a79b75f0bb57629a194
  • MD5 4165485d021c7c00a21951708d2300fc
  • SHA1 3a9468a830edbda135cf82d106a7dd4dac210f5a
  • SHA512 594586a42aee4213e7fb03fa1e1e952cde568455269c170c9f097802966215e4e0a57dcad7aea28ef6a672121a541b2ca940bfd9463ce31dee4e613cb5721859
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineinfostealerspywarestealerupx

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2