Extracted

• • Target
    3a82f0b63ef6186c5f10a47d41726d894b21032a3e35dd84bc3be8729d2b9a09.exe
  • Size 535KB
  • SHA256 3a82f0b63ef6186c5f10a47d41726d894b21032a3e35dd84bc3be8729d2b9a09
  • MD5 31097d0ff3fa776d176018a8fa2299fa
  • SHA1 45a224a3ae0cffb8f49af66882921e7c1718b795
  • SHA512 b3bee5a850e981cdf688fc4d1fd7cbaf66887f17f1a45b13c11d81c59d6ebf328ef3dc3610fcf28302956a876b62d86d4ba709a40addec8785b6fc352c386e8f
  • SSDEEP 12288:w8bY22oVVenRF7lewJxzdiJDoo6TV4mv:w2Y2RVVenRb5dEch
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesectopratcheatdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2