Extracted

• • Target
    619b0aa9a4a39cfc019d187fa3366ab0_NeikiAnalytics
  • Size 3.0MB
  • SHA256 96d90c25812950ec1c42fb3f41ac16db73846cc988d7bb0e7bb301a5da0edce5
  • MD5 619b0aa9a4a39cfc019d187fa3366ab0
  • SHA1 65ad68791c68fea6caf053e4ca37a6e627a7f464
  • SHA512 c84ebb2773768d839a9eab969e3c62f9b18ed7a1180567402fd17cfff504b48155170d17c4d64402a9bb5b5e8b526d02b1cf7818c421e48f9b54030260cef7bc
  • SSDEEP 24576:kVsQ6BKfC+CWDU2fy6Uuri8MmOmbCYUz7PH8Zeaj0HM3ow5XtP:kVeBB2kMOnYUvPb
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesectopratcheckerinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2