Extracted

• • Target

    Genshin_pwAPSK/Genshin_pwAPSK.exe

  • Size

    655.5MB

  • MD5

    a661688709a110c18c98b093c7635516

  • SHA1

    4b39e15fe4d0ce5560d3f0749d348dac657bb962

  • SHA256

    38607130947eb1abe492d68e81f3b393b146a9c631a3101aebe775def4c0123b

  • SHA512

    d838fce78dae4c56abaf6e5cac0d57f121823f92fa56f037e34724fb7b49660cf6251c08144e9322ae174b3448b34ca87145f68ae1d4fc91261df6360bb45015

  • SSDEEP

    98304:kC0Md5Z5XT1dNfYiFToQVVUJial16fuu5I9Ee9eZioI8Q0:lT5DT1dHFrVna41q9Ee9eZio7

  Score

  10^/10

  redline2discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1