Extracted

• • Target
    2025-11-09_8c8daee446f3150967f5dee309cac8ee_agent-tesla_elex_hiddentear_remcos
  • Size 663KB
  • SHA256 243fdc038f075542e5565854bebf81f54b353a872e7bacd5cc0476b8b94e1331
  • MD5 8c8daee446f3150967f5dee309cac8ee
  • SHA1 06abee36de9e73ebbbd0e8751abad88b32fe9c34
  • SHA512 dacd673a94305f0108dd8019627ac9dcc0b917419bba7e5781244d01537124b75888203ac056621127b0bfdccf01adef17618114e873342364e8531b0059ef7a
  • SSDEEP 12288:fTugfeRPAlHcF+f0GMaY2C2Q/qjqEs9zL/R2mlsYq3xdAA:Lt+L2C2C4qEezCA
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  cheatdiscoveryredlinesectopratinfostealerratspywaretrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • SmartAssembly .NET packer

    Detects SmartAssembly .NET packer.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2