Extracted

• • Target

    1bf2866754b5576e8181b118717a4781

  • Size

    370KB

  • MD5

    1bf2866754b5576e8181b118717a4781

  • SHA1

    07b94122552efb48d658331785a1c4c62454011f

  • SHA256

    0fb7d001e28f45c69936e416afbb84866b1d24d3c53a6f0cd3452a2272baa313

  • SHA512

    66620e4109dc9f479481369341ad3a68dffe8690e242a08006f6972d76fcec15efea7e8567110fe1a5a8bc7d64f393c883659825fa26ecaf6e8bb14e4bda9741

  • SSDEEP

    6144:fM4Ry8K8EqakgEb3qeSagNV/svDbLpA5ApGW3OKn7Caok8umy:fM4Ef8EqakgEb3qeSagNV/svDbLpA5AF

  Score

  10^/10

  redlinesectoprat5k_absoluteinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2