Extracted

• • Target
    439b03292b559386db6cbdc8d20c3b014206968190b637f3c18ed9360a3ecdc1.exe
  • Size 95KB
  • SHA256 439b03292b559386db6cbdc8d20c3b014206968190b637f3c18ed9360a3ecdc1
  • MD5 17237dd481939c25479ceb40829b8787
  • SHA1 ea028f7a3d50429f42951d0f50b95e4499ba7b9b
  • SHA512 7bdc1d95b5ba9bbac564ef66ab351d9bb51110c3abde8fa7601cb4c9ac3c3eabfccadcbcba8b67b8034a7a41744a15e0ecee498fd0ed1a4cbc3bdf0864a54369
  • SSDEEP 1536:9qs+NqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2QteulgS6pY:rqMOY3+zi0ZbYe1g0ujyzdQY
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesectopratmetin2infostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.

  behavioral1behavioral2