Extracted

• • Target

    6730de9712e66d862ceef345586b49da896e5ed49f452027cc57fb24ca333405

  • Size

    1.0MB

  • MD5

    ae6d5107bd2f25033b6ba4b5701f659c

  • SHA1

    2889626c7fc8a67deb7b7d7c1fba26f06a01c76c

  • SHA256

    6730de9712e66d862ceef345586b49da896e5ed49f452027cc57fb24ca333405

  • SHA512

    5105dd28e4e4ee36822a7c3763a968e0bb8181895431afaeafa1d38ef1566287931434cadead76265ce7f742799c3c210bc8a164cf76cde620cafdaac2e4e72d

  • SSDEEP

    24576:MqDEvCTbMWu7rQYlBQcBiT6rprG8a2lKK4nT/T:MTvC/MTQYxsWR7a2yz

  Score

  10^/10

  redlinesectopratcheatdiscoveryinfostealerratspywaretrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2