Extracted

Extracted

• • Target

    setup/AISetup-Crack.exe

  • Size

    346.0MB

  • MD5

    5caa09b3a7089d4ec3ab263af0041826

  • SHA1

    40bafeae4244b17f5bbd42b1863fe8ba83d6e6f3

  • SHA256

    73487ed92e7cc9a0017dc27784a2a48d5d6ede2d76fb3190ab69cdd402d23ab1

  • SHA512

    a49206f66d08b593f0546436e4a83ecebc21d7a8e0a4809075f4ca72513232063b75b4412cd9ebab00e185979e3914c048936de2a37cffa65531a44b8f0eb8e7

  • SSDEEP

    98304:pO/naJsbWq0YTrHXGy0fMu6c5A7lfvF6s0:IaGqHYTrHWHDA7JF6

  Score

  10^/10

  redlineleo5discoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    setup/Pre-Activated-Setup.exe

  • Size

    353.8MB

  • MD5

    e49a9126069d2e7c26159b2bdc38e822

  • SHA1

    97a3494ac4065d149a7c7426ce93bd73ab223af4

  • SHA256

    c060daa79346e21d4f577b035b44b0d391bcfc2d20edea54ca3543ea8f568db8

  • SHA512

    f16f0c03932ac35b0705216e1ffdb8aa43d77f721d6d8b4b2352341aee23b96b19c80cc771a02d9eb01a980a25fb6377b64eae59c0903b62f27b2d0514ba45b5

  • SSDEEP

    49152:TvX6WTfpYz2wZEEOva4EwL7XlFuh/NmEJGxwnXCprcMRMfM9uGJ:T/AzbEEwd/V8h/4wMKQB

  Score

  10^/10

  vidar1281discoveryevasionstealertrojan

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar family

    vidar

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Vidar Stealer

    stealer

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Checks whether UAC is enabled

    evasiontrojan

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral3behavioral4