Extracted

• • Target

    13B9619F45569BC734D79CF8A412AD08.exe

  • Size

    95KB

  • MD5

    13b9619f45569bc734d79cf8a412ad08

  • SHA1

    8e8894286ff8bacc85bb8cc53a258d8753208011

  • SHA256

    537a5c269f9e9f5800a0b21d17d07a23bf81dcd90abe8145892820baf6d5f502

  • SHA512

    3f537deb8d93e73fe6c4f5c714b3a408c374e49a2f7d9772edd60aa15234491fb43280306d9e052e092cc0c88a77edb402fa64ad324e0ea9caddc49328cad2e3

  • SSDEEP

    1536:5qsCOqJGlbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2vteulgS6p8l:X1uOYj+zi0ZbYe1g0ujyzdL8

  Score

  10^/10

  redlinesectoprat10 aaddiscoveryinfostealerratspywarestealertrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2