Extracted

• • Target

    8e28a0090832a76cf71c417cb1bf7990b9af86be258b732117a47f624387083c.exe

  • Size

    95KB

  • MD5

    184ac479b3a878e9ac5535770ca34a2b

  • SHA1

    1f99039911cc2cfd1a62ce348429ddd0f4435a60

  • SHA256

    8e28a0090832a76cf71c417cb1bf7990b9af86be258b732117a47f624387083c

  • SHA512

    e0f5185ae890b902ea5325066df23959106712e7990e120a1b9752bbd0331cac968af5ddd6092f75a1c576d4c83f4093dfbf53a2c90870d1c02b31a0e8282bb4

  • SSDEEP

    1536:1qs+lqWWlbG6jejoigI/43Ywzi0Zb78ivombfexv0ujXyyed2HteulgS6pg:zCReY/+zi0ZbYe1g0ujyzdDg

  Score

  10^/10

  redlinesectoprattgdiscoveryinfostealerratspywarestealertrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2