Extracted

• • Target
    hui.scr.exe
  • Size 1.3MB
  • SHA256 ad7f60b401fff080de66189bb4b4ecb1a99643deb577884566818757a6eb4018
  • MD5 9ac3387e9d8450a61e2b6e4c1d86537a
  • SHA1 f3a387ef36386726c4d4876ffdab14acca951785
  • SHA512 0e5193916849f6a489127874f43bfb4100919421c90e7f337b1cb3d67843d85fb42b2c9081b95d5bffc574941418e392415e6cdbe17429befd610118ed4c7c39
  • SSDEEP 24576:8rbA4ECQP2Qh7CLzobAtxzoT+QD5Ff4ldE/fLKi+3JG7DrDMTCcb1lX1:MWP2Qh7CHobEz4NQ83MCDrDMeILX1
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redline1discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2