Extracted

• • Target

    Kiddions Mod Menu/modest-menu.exe

  • Size

    500.1MB

  • MD5

    8e3a0566155d6310391de7011d9c3b33

  • SHA1

    3a5e635addf62e54ee9c86774a2fac8abc7a4c1b

  • SHA256

    7f1a50c3ccef0f5173b87e25b597d9610292f0d956e15f2f31d3d5373adec5c3

  • SHA512

    b9686d1be20b0df6bf32de7e46c95e1ecd6f155849eba2b0635799631a3aa264e35276eaae87a0913484628c225c452cd209c84b9f0ea52f01ab2b414dd64b7e

  Score

  10^/10

  redlineytstealerdiscoveryinfostealerspywarestealerupx

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • YTStealer

    YTStealer is a malware designed to steal YouTube authentication cookies.

    stealerytstealer

  • YTStealer payload

  • Downloads MZ/PE file

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2