Extracted

• • Target
    KiddionsModMenuInstallerV0.9.0.7.0.exe
  • Size 488KB
  • SHA256 b2fd01b66512f2a7ec6cfa1fa7907582ec461a36fc709f14f1d9504f064e6606
  • MD5 d6fdcb87e053e513e1f0c1b6191aca58
  • SHA1 2688f317cc993d9bb7b3011122682a1ea80f87ee
  • SHA512 56f8a26a26712f0fc97cd8943f549bb3cc6533c6f8059aa50b3f284a721e7deff56d2be1c90671dae605a5bbd1b71a6072a804f63077dd56837911ab0502314f
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlineid657568563discoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2