Extracted

• • Target
    https://www.upload.ee/files/16423679/Mail_Access_Checker_by_xRisky_v2__Paid_version_.rar.html

  Score

  10^/10

  redlinesectopratcheckerinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1