Extracted

• • Target

    ElectronicDepositCopypdf.exe

  • Size

    1.8MB

  • MD5

    f252f506f84914c3886e791dc984c9e0

  • SHA1

    62dab96df46604f04cd14ee24f27e32840809722

  • SHA256

    055e57a625038b3082161f3e2148a5fafc6f767298cd9ae67f5c1cac9ab71dad

  • SHA512

    90ae68bfb3ceacd5fa86ed784f3f3ea5f809b703ac35e041adb336eb813bef953421b36b6e7ad77b5c3b2d7a21dd5f975f3c4891a17d7fd1502c60320d73ccb6

  • SSDEEP

    6144:cG5aR292nLhb3ZDcJbmiRBAOb9W4YbPg02ytpRlt:vaR2knLhJWBvWxMFAXlt

  Score

  10^/10

  redlinesectoprat4infostealerratspywaretrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2