Extracted

• • Target

    248de0e5ec264bbcdc5d5cf89c88c9d5

  • Size

    675KB

  • MD5

    248de0e5ec264bbcdc5d5cf89c88c9d5

  • SHA1

    e455c0a2b623cd9649bdecea0f2e496d72193574

  • SHA256

    2e484f46233635cb09729588419bf044a7766ac81c32321c717078c29a3cec9a

  • SHA512

    14f13eae97188b62e78b925d65119b0cf23597f48fca113afef05aa1eda1267be6be1903ee75d798993916040eddc5e515d18b82dbf33430f40f7e62921ca4e0

  • SSDEEP

    12288:nOsKHd7DCTXBYDzvYuvGrqIVWZJ4giqjdWwi8L1eypbWQOQ06yClIcjQNQ4mIxf9:zI/v8DVZwiCFMc5icEFmI5n05CuEjGMF

  Score

  10^/10

  redlinesectopratinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2