Extracted

• • Target
    b59653f1e2b8dae784ca4211199d2887ea676d27e7af9d057a625cf9281c17e0.exe
  • Size 95KB
  • SHA256 b59653f1e2b8dae784ca4211199d2887ea676d27e7af9d057a625cf9281c17e0
  • MD5 8c21b2fbded2faeb6db2e7a20c513cdb
  • SHA1 38b837cc5fe814ca9580f9029386aa405f8e94df
  • SHA512 8affc27bee62305eede5205101e457e62f33d137c62c1a1c324399052d1231876dfc7d0148055618044a96f14fe4cbd3ba2428bf3efcf0993fe534c0524a2fe7
  • SSDEEP 1536:5qsCbqDylbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2z3tmulgS6p8l:XEwiYj+zi0ZbYe1g0ujyzdT8
  • TLSH
    T19DA35D3067AC9F19EAFD1B75B4B2012043F0E08A9091FB4A4DC194E71FA7B865957EF2
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  cheatdiscoveryredlinesectopratinfostealerratspywarestealertrojan

  • Family: RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Family: SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • RedLine payload

  • SectopRAT payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2