Extracted

• • Target

    52e08cf417542015e47ebffd7621272bfa299d59ff6f651b3983b0d73339eaeb.exe

  • Size

    1.1MB

  • MD5

    7900cbc60f5157b5bfc39e73f5671e53

  • SHA1

    2fd5cd1b3b8743393c7cb5cc149391d81a66b399

  • SHA256

    52e08cf417542015e47ebffd7621272bfa299d59ff6f651b3983b0d73339eaeb

  • SHA512

    159cd6c3f72d63a88075d58809b07b42145e6f1e77633bec7a2b83f425c4276b2827edd0e1f1103953dab160d94fc5cf2cad968644abb17344c1310fb530aa6d

  • SSDEEP

    24576:pu6J33O0c+JY5UZ+XC0kGso6FaZ3X3N5LMyC6t3IPWY:Lu0c++OCvkGs9FaZH3N5wyCGY

  Score

  10^/10

  redlinesectopratvex4youdiscoveryinfostealerratspywaretrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2