Extracted

• • Target

    844-1-0x0000000000830000-0x0000000000C8C000-memory.dmp

  • Size

    4.4MB

  • MD5

    bc74773f5516edeb6fce1e71f2c4f73e

  • SHA1

    25a2dbb08ece4eae964e10755439f9992e159844

  • SHA256

    5f71fabea82ce5c3f7347f556ded702298b5f9b583f7347b6b126b4403eec6c6

  • SHA512

    cff0511abf455158a07430b2cdb9e658b3453e6da0b9352be249bc8da3696aa5cdb8d0b5e1d73f34a9cbc2b001916b2b2acfa48316d4129852b234891de2d9d4

  • SSDEEP

    98304:t6nhXZtBbTrYgtwF2chMw8tg3IlwwK6roxXC8m:tETrYWuhM18Ilww5oV

  Score

  10^/10

  redlinesectopratcheatdiscoveryinfostealerratspywarestealertrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2