Extracted

• • Target

    TORRENTOLD-1.exe

  • Size

    1.3MB

  • MD5

    984f8dd35c2ae61a310992832df6cedf

  • SHA1

    2262fb9d4244a33d359140fdfd6d89779a887b41

  • SHA256

    4b3369d4573807efe4bf8f571472ee2093e0b28c17eef94d73ba1ed63cf959aa

  • SHA512

    509b94ffaee394f1c2d7e79a21cb966068a42cc5a774c765a2bd86b1f55982810840e61262581cbed879e8ec85f39fee7823467d1d81ee6a07599e709c5d6792

  • SSDEEP

    24576:b2LBa1xIo0t29o0wu7osrgS4UTOHwnsXIScCfhJfmHCSjg:bk+xb049odAFksTLnsXz7mHj

  Score

  10^/10

  purecrypterredlinezgrattorrentolddownloaderinfostealerloaderrat

  • Detect PureCrypter injector

    loader

  • Detect ZGRat V1

  • PureCrypter

    PureCrypter is a .NET malware loader first seen in early 2021.

    loaderdownloaderpurecrypter

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2