Extracted

• • Target

    8e0295cba863c4dd3532fe1e0f7adecfba02cc348addf85cb515abfff5f444ef.exe

  • Size

    322KB

  • MD5

    a08a6210cf08941ef3db7829523fd75a

  • SHA1

    e00aadff2a576dbab87763f9197a3c4b87ce1538

  • SHA256

    8e0295cba863c4dd3532fe1e0f7adecfba02cc348addf85cb515abfff5f444ef

  • SHA512

    4cf2bc8a9b05cb0cf793d3133fe3318bea037dcb1e6079bd095aebe39da761d4c3538f2d349367cc0721b1ef3f29a09ab640c7db0fb480a0f26703a46337e1bf

  • SSDEEP

    6144:VxPOAfsdY0LoOaYo7jaO00ssjxAODSNCgRmo+ItzK21OOeym:VxmGsdY0LoOaHORB+a+24ym

  Score

  10^/10

  redlinesectoprat@bo0tleggerdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2