Extracted

• • Target
    06979f859be403c6e94b16452365fbeccbc0f85b7c6e40ba41c3460856027db2.exe
  • Size 95KB
  • SHA256 06979f859be403c6e94b16452365fbeccbc0f85b7c6e40ba41c3460856027db2
  • MD5 034669b9e2200fec6a20f622acf4dbd1
  • SHA1 510b27931b6f598b997298f4ae791848a3be9ad3
  • SHA512 965b41536e7c53a10c0f1cc1497759d39ba2b5114018094092ca148cb9a599c4721795aa9af7edad180f78b94ad96aba56fce629a9299107136e40ec3cf212a3
  • SSDEEP 1536:5qsCOqJGlbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2PteulgS6p8l:X1uOYj+zi0ZbYe1g0ujyzdL8
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesectoprathackusdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2