Extracted

• • Target

    3d71a074cc00be7e430cd12e694bf4188d09c5abf638705de00334a579870455

  • Size

    422KB

  • MD5

    500850acce07397c1058b3cbbf85e821

  • SHA1

    49fdcd1c813e49e4f2db4dfa132cb9f8334b60d3

  • SHA256

    3d71a074cc00be7e430cd12e694bf4188d09c5abf638705de00334a579870455

  • SHA512

    3fa1796cdbee990bb285dc64d5905d8d90fab5310606b22d615395cf90609b9157d201edb883df3c24d6ce346c625d4a72bc96bfe4dcfbd6b771c840db7dd903

  • SSDEEP

    12288:maAKNGaI2KQxLKtC+IgDZMODGxkEtQKSmS3IPGZghtU:3AEG12KQxOUMDZnDvKSj3ImQtU

  Score

  10^/10

  redlinesectoprat@masyana_lztdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2