Extracted

• • Target

    5527f9b68654ac5ec99d2839434c4ffd

  • Size

    389KB

  • MD5

    5527f9b68654ac5ec99d2839434c4ffd

  • SHA1

    7eedeb5bac514a179bc7cc46a44572b0e9ff121e

  • SHA256

    057817c6a71d51a17193ccc891dce293938ff72a8021336718c3eb9d5b47c518

  • SHA512

    ca5770a34ba39cd999b0698e3e9b717fcd2a755390b69117ef2e38e263b2d31df81a8da07c7788edf92145229be7bdb2288c197964035ddf2829fbb9187f660b

  • SSDEEP

    6144:UJCUD10LYibzbK9jTMyUkxo4G8CFlr64s/V2orlB9siKqp7HSMayw4d0Aty4TJAc:KmYLrdAr6VNfrH/FyMQ+T+

  Score

  10^/10

  redlinesectoprat@red9xxinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2