Extracted

• • Target

    Pictures.exe

  • Size

    877KB

  • MD5

    5fe61dbd19271b37f733be749530031f

  • SHA1

    51e489aa4b73aac7c6116a3de0ad1e03fd0716c8

  • SHA256

    ab82349ff6e283c364a3188708ac4d581782d072a9e9c04c8381fbd1bec4cfea

  • SHA512

    dfa10f1e1620c9861ca6bb9b7f3b1aa82e3f41457b52f2d5273d1e4ce07df28ec429f4a1dc7b3c61892d9a404ea58b25926aaf0d58966d167180d615c908707e

  • SSDEEP

    12288:yZFKLCVORpMn++jGNXzDn47MpFFjMKSucsiYJOlAStqwfGJD192hsilrUSX59:sOdxW7MOGtJOlAStHeJDv2qqUe9

  Score

  10^/10

  redlinesectopratcheatdiscoveryinfostealerratspywaretrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2