Extracted

• • Target

    14f2664eca423af1836adc6efd21a4bc

  • Size

    371KB

  • MD5

    14f2664eca423af1836adc6efd21a4bc

  • SHA1

    5969319908a3e824becf83c1a7865da852d6685f

  • SHA256

    fbe5c3b3c06ab6d02edd212fed151f58b983e2987ff68d86b0817b0c7daecca8

  • SHA512

    43a34afca5884b6ad1a4d17ceac8f50bb29fdbf54390557853686d799d879e61ea7f8791a631594815c8844a5bbd8e05978b2509b32d3b1c76e8c5822884da62

  • SSDEEP

    6144:6CCM4Ry8id69aqqEzykgIUMHhc6juy3Ow77CaotEJnI:6lM4E3d69aqqEzykgIUMHhc6juy3Ow7M

  Score

  10^/10

  redlinesectoprat@iamdaun1337infostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2