PrivateLoader

PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

RedLine

RedLine Stealer is a malware family written in C#, first appearing in early 2020.

RedLine payload

Tofsee

Backdoor/botnet which carries out malicious activities based on commands from a C2 server.

Creates new service(s)

Downloads MZ/PE file

Executes dropped EXE

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

VMProtect packed file

Detects executables packed with VMProtect commercial packer.