Extracted

• • Target

    2213257cb97648c1e509b87bf698b4dddee1d250497b810a5c165db7d0809f93.exe

  • Size

    547KB

  • MD5

    94de8ad3e801845cf73e298adbb6b335

  • SHA1

    19867769635b2dea8861ebf630065f33e42fa28b

  • SHA256

    2213257cb97648c1e509b87bf698b4dddee1d250497b810a5c165db7d0809f93

  • SHA512

    a4751c4fd83296d2bda4eaa1e447b5ab7b6981297f6807be9f680bc6f21879b72e9e60b172ef59068180e6e888765a23c04bc35d7dbdc53e753601d1d4039c54

  • SSDEEP

    3072:dTB3AELug5IIjtgmEl74M70vVyrrgqX2lEPx/aE5WEBkS6JjkKYlB:dTBX5T840uAmWPxLbGK

  Score

  10^/10

  redlinesectopratdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2