Extracted

• • Target

    0945f39b0120d145e17eb04a9bfc5205

  • Size

    203KB

  • MD5

    0945f39b0120d145e17eb04a9bfc5205

  • SHA1

    8b6471f8ef6d90eb6f52a819ab2379c83b317d92

  • SHA256

    d0ec43c0885fbe5b2c561762827e365d760bf18c7fb1f01d2eaebfd22b11640f

  • SHA512

    a9b4cc57a4a71ca9e458d944976af755c522780f1a26e4812a0c974e77855e9b19c042f5e0815f7a58707c6e928d96298c89e792a2a8b766f1692e9fcda08bbb

  • SSDEEP

    3072:FHPsopjzJMURetE7WeYz/K80nGEh/hXKmbYcVQqJdOQfl/uHf0T9Ng2iO4iO:VPsot6E7of4GELaIjJdOMlYf0T9NcO

  Score

  10^/10

  redlinesectoprat@qu47tr0infostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2