Extracted

• • Target

    e157d389dd61daa5116e746d66a131e5083e96a2b738d2a32d467544a62438e8

  • Size

    1.3MB

  • MD5

    c1ce44bc8688e3c4f75891b7c4080ae3

  • SHA1

    c00764ef15bf22774749e6c0f7359d8271f7b07b

  • SHA256

    e157d389dd61daa5116e746d66a131e5083e96a2b738d2a32d467544a62438e8

  • SHA512

    bf49a9316af79bead9c95a12ffb068bad177dc6380d93d380b8a5ec9fe7cfd9a320ea8211e8d59bd9fb15ca03695e9ac1e8cd58c37ea61b6b663af317fdda442

  • SSDEEP

    24576:N1trXlDTWdkJZHzErR9109QthKkt6FGNBpHo/CQ1CIrPDbg2HUgNUWTr:hhWkJxYRP0uHnHNB1x+rd06U

  Score

  10^/10

  redlinesectopratus123discoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2