Extracted

• • Target

    30101449d96ccd1484ee0baebad085f0407fb0f4a32ce7ec82560807c2d511b7.exe

  • Size

    4.6MB

  • MD5

    f17467fda613b0ff91f03faaee5161e4

  • SHA1

    5197d7ae212548c10c294a41a6ff7bd2f1dc8a2b

  • SHA256

    30101449d96ccd1484ee0baebad085f0407fb0f4a32ce7ec82560807c2d511b7

  • SHA512

    036ab03dccde6283732f39f7ec1561848e58dedb990bb61800fb66be707968492a389d20a75175d8b697a853d9aafdedf1fa1f20e3cc6b994d3355c0c818287e

  • SSDEEP

    98304:mLKdfxVkeucNTG03ukGdma07dsj8bFBkeFmhiSYRs:djYyfDvd0yDkyhs

  Score

  10^/10

  redlinesectoprat@hensssydiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2