Extracted

• • Target

    105bff0cd42f9453a8c41953d2eac1faa39d0f1c0446fe44e36c75307e8d1c0a.exe

  • Size

    95KB

  • MD5

    ea2a51d3675852c7aba80fb4aefd6d19

  • SHA1

    72307adf53b1b8a28dd5d4094ef98df8cc28b743

  • SHA256

    105bff0cd42f9453a8c41953d2eac1faa39d0f1c0446fe44e36c75307e8d1c0a

  • SHA512

    aba59de2a9a6fcd2b836f53777dc908900ae1ad5f3f4815d30704d3ec770240a79e72330b0a2a6631c17dea6363ff4e3e1cfc88f0f55de23ef27808b5446d984

  • SSDEEP

    1536:5qsCbqDylbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2z3tmulgS6p8l:XEwiYj+zi0ZbYe1g0ujyzdT8

  Score

  10^/10

  redlinesectopratcheatdiscoveryinfostealerratspywarestealertrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2