Extracted

• • Target
    MultiHack Menu.exe
  • Size 397KB
  • SHA256 059c47f1fb93e65580c59415a40a376c8fc3168f13282f2f5efddd4c54ce0fac
  • MD5 a88063e15a8ef3950e7ac3360b67498a
  • SHA1 8ba734c86c9256303f735e181d3c793d3f28d24a
  • SHA512 7dd90454524ef562bedbd0289096badc4dc4290a8ed36fcaf111ecb8ea15a3841b50b478473912e68aa1e19e2e7257a3b297059817ef648d8bd762a2a3826dd3
  • SSDEEP 12288:nsCpg2OMOXaa5ZT7AMvtcArm+Pgf1+4yG8NM:sCG2bBwZoItcsm+Y+XG8NM
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlineg3infostealerspywarestealerupx

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Downloads MZ/PE file

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2