Extracted

Extracted

• • Target
    081efe08a54211147b7fb7f7dafba081da5ca5c0902f741003c4e4374e773869.exe
  • Size 182KB
  • SHA256 081efe08a54211147b7fb7f7dafba081da5ca5c0902f741003c4e4374e773869
  • MD5 75e4e9080625c45150fb0c729677203e
  • SHA1 c31559bf53e9be7501c6fcad32ad29368d514e7d
  • SHA512 fcb0e13c5e3e1bf54dcb22470fc83097dffffd191e6f112595e0338b0a9f33dd45feb774a94dc8a00f35c09970d671a057ff5bd646541872abe8f26aa791bcbe
  • SSDEEP 3072:XfeuSBI5HiGQMFwGK7yFTXRh63wAaH+++K2S/vYXqMgpdx0Q7oD:XfeuS8iGQMFskTXXkwAaHLpYXqMgJVE
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  laplasredline5139967220infostealerspywarestealer

  • Laplas Clipper

    Laplas is a crypto wallet stealer with two variants written in Golang and C#.

    stealerlaplas

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Uses the VBS compiler for execution

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2