Extracted

• • Target

    1d831df3d1f180bfb4cc7b27be38f382

  • Size

    1.1MB

  • MD5

    1d831df3d1f180bfb4cc7b27be38f382

  • SHA1

    ddcc8728f156bb4abbbb26aab07b430d9744197e

  • SHA256

    01245ea905c31520a725ff0857bdfdf08f02a6ac1ee2bff187a74ddb440ea54e

  • SHA512

    4fe78c506fe1a51168e523db83d6cf484aff2c18373de05cdeca168ce4f1015807a23ad79c184a24d4bb7bade0131b9026e9ff7ec658c95e16f91b114f41d8ac

  • SSDEEP

    24576:c9fddzV4zDhdGNfbrBGzAmpErRBT03l7QNElVqcIx8Oufba0WRC3Cldt:c9fddmvhcprB4AmpErRBTwCEl8YOufbs

  Score

  10^/10

  redlinesectopratpak_1111infostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2