Extracted

• • Target

    SAMPLES & QUANTITY.exe

  • Size

    628KB

  • MD5

    32dadf5259c17644e7605dd1382409d9

  • SHA1

    65f98be9a8adea90f69dcd115fb82089b879ee5f

  • SHA256

    78f637413574de4d2fae22693696d4f9e05bc3622c304ece3baa8788cff651c6

  • SHA512

    755b9144d5db27da7d3954793b5992de35d495e665c43553782328693eb7310f0c34e1827e45796917db74c0d404ae87bc687a7eadfa5835ef8daf55f947a2bc

  • SSDEEP

    12288:azVxGIaOq+A3RNoVMXQWPYUDdxFAvKRwqexk6k7hCPFO:aZxhaO+PYKASRWBktC

  Score

  10^/10

  redlinesectopratcheatdiscoveryinfostealerratspywarestealertrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2