Extracted

• • Target

    8da0f0b8c48b288ecc49257530d428f97a04c06880ca522bf95e963f8984230b

  • Size

    193KB

  • MD5

    7ae31981d3246503a14c3ac315a53015

  • SHA1

    96458669ebe2617d99325cc8a95d73dfea44f1e8

  • SHA256

    8da0f0b8c48b288ecc49257530d428f97a04c06880ca522bf95e963f8984230b

  • SHA512

    df14df3f26628f5586cad042136b7ec77c3f6b3499023b2be5796d92df1298592bd8477e919695a2b3b371c2118b2390045370c5b8bc400232bf2a297db6173a

  • SSDEEP

    3072:x4U01Aqc91qXwxc4mZS9ybqSl6zWdzc7eEt8qTd0L:x4X1AqckKTmQ4qSlTdzcKKjTu

  Score

  10^/10

  redlinesectoprat1711042443discoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2