Extracted

• • Target

    0x000500000001952c-294.dat

  • Size

    95KB

  • MD5

    34f1172b124be266b5189a98d7ba6fcd

  • SHA1

    8f0be9a995de173420e00a1b38461fc875215c90

  • SHA256

    7f2288ebe5d4a3ef29e2c1c2a385d9cf92d1891a4a0311236ae1bcda8d8f15ab

  • SHA512

    6d719e0d6c44604439ca97975f0e463b348c9ca324580e8c96b627110c4fafc72e94fc155464a280985da038e14d5da9b092133fc8915d17e3370cd48c66e4a9

  • SSDEEP

    1536:aqsCwqR7lbG6jejoigIL43Ywzi0Zb78ivombfexv0ujXyyed22teulgS6pw:IDmRYL+zi0ZbYe1g0ujyzdGw

  Score

  10^/10

  redlinesectopratlisecloud -- livetrafficdiscoveryinfostealerratspywarestealertrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2