Extracted

• • Target

    RFQ6689-TECHNO TOOLS.exe

  • Size

    313KB

  • MD5

    951cac4aa20d378ecc5587f21332703e

  • SHA1

    5b200fa24bcd7a985063360a8aef540355b43b75

  • SHA256

    3848bff1afa877296131976752c59b7040956b11cbeb04c6188bdf825eb6761d

  • SHA512

    b204e34590b04939cd17738ad18d0f6cb83b7d6c223cd8c041bc12998a3f85d41656ce9f8e753a612c0147e6363f8fcb674573ff7ba8dde891f840a355d50eaf

  • SSDEEP

    6144:ez+mAEWFiF6GPHuy+hMZCXcrIeuGCTfxBl:+7AEiiFPp+huCsr7uG8fxBl

  Score

  10^/10

  redlinesectopratwddinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2