Extracted

• • Target

    d7e807e56e40b35109fa8009fd239799e62c1be1835a39a1fc2057e23575659e.exe

  • Size

    577KB

  • MD5

    5fd70f0471b4325ed9f621ad3c7d6af2

  • SHA1

    ee80f46e62cb8e24119e69ce0c5fa58aa3a038af

  • SHA256

    d7e807e56e40b35109fa8009fd239799e62c1be1835a39a1fc2057e23575659e

  • SHA512

    0263b1f9ddf76efe781368237389848006ff144554834e572dd482c4b9ef9758febf813a6ebbf4dba086638452fe71c5bd93f19967c1f77abeef63fb1e421764

  • SSDEEP

    12288:Ixxgm9khVuCPpfNncA1cpmh/X3wbtIb10sJ9R5:IHMvH9W2c0vst810E9R5

  Score

  10^/10

  redlinesectopratcheatdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2