Extracted

Extracted

Extracted

Extracted

Extracted

• • Target

    sus.zip

  • Size

    1KB

  • MD5

    51059060480c22693c8ff2332079a3ec

  • SHA1

    ed5fe31b930e20c13b5115b01b08684a32a29fac

  • SHA256

    5638ffc3e6d75054d693270d66859e040ada9563aa90ccd6e2a0f3a0e67b8c0b

  • SHA512

    bf8192b9e6f55baaba22c88d820c284920668c9449363c8c62a1831a143eeeb55eb5d386e8ace3de797723ba139db9fe4cd7e13158d5025f93ba539f4c37cc87

  Score

  10^/10

  redlinesectopratsystembc06.05 youtubecheatlux3mixainfostealerpyinstallerrattrojanupx

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • SystemBC

    SystemBC is a proxy and remote administration tool first seen in 2019.

    trojansystembc

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Uses the VBS compiler for execution

  behavioral1behavioral2