Extracted

• • Target

    98b7e1cd5ac9c7c6ea2362d8b13d53e5

  • Size

    193KB

  • MD5

    98b7e1cd5ac9c7c6ea2362d8b13d53e5

  • SHA1

    368c18b73587cac5615ed148715063500a115a08

  • SHA256

    9697f2beb7e3fcae40a7ae2cea7111087c2e57c3407c135b281fefd9e13ae5b5

  • SHA512

    2a625246f85307fb6112bb9ef3871aa8b14aa63a4088eaeae0f0af0ac112a5b3d4898324e0201a9918e1443e5e2ca496bce616700565ade549141fc8d4a42fe7

  • SSDEEP

    6144:p4UdizUJiprVVeJewv3S+ZYkM5W8w2eJCh:di42xVe4w5ZlM5Rw2

  Score

  10^/10

  redlinesectoprat@first_namerinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2