Extracted

• • Target

    b49e1e828ca85a5ba4232536589ae8a2

  • Size

    1.2MB

  • MD5

    b49e1e828ca85a5ba4232536589ae8a2

  • SHA1

    1bb799fbcf26121be3f67384b662cc22f0955878

  • SHA256

    8ed3614337b30b6f52623f70618a84fa64fe6404a2592b1bca3b4c81506e4b6a

  • SHA512

    fc974b107f7c5eee416baa7a9386cca5cf2675edec78bd4410f0773abcab7264041e4fe16f4fc84a59e3535080266dab9da6d7d0e195e5dce5f060d408a08165

  • SSDEEP

    24576:99qHeJtAb2DxPeuXe7gmS3yfNsBkofce/z2p0L/rN4krwVf:lHFUuO7bS3ksBp72pAqG

  Score

  10^/10

  redlinesectopratbugattiinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2