Extracted

• • Target

    RFQ- MACHINE QUOTATION.exe

  • Size

    718KB

  • MD5

    b078b3a0f8c96dc283dcab3c105e8014

  • SHA1

    89c96c2bd5dc00dc669ec0fe2314f9ffc10e59ae

  • SHA256

    b537c8eed901d467529d86caa647489a7b0d168c8a151caad2fb75bea4d99a4f

  • SHA512

    e5fd6f1b63dbc16b25f565463826facfd043add64d99cfb52da0f2518de08c5883e9f31afe1164f3e3c5aa7f7016fb29e273a9e36a65c21008b3c9ffcc2b236d

  • SSDEEP

    12288:RXm7z5SH0A6I6gZi/HM3XqyhQqfsNkaKiWhuhCH:sz1A6k0/HMbhQvNkarWh

  Score

  10^/10

  redlinesectopratbkdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2