Extracted

• • Target
    4617d135c1d169971def5a3d99dd55a2f00669007ba6d8c844062bf13ef434d7.exe
  • Size 705KB
  • SHA256 4617d135c1d169971def5a3d99dd55a2f00669007ba6d8c844062bf13ef434d7
  • MD5 86bde676ac49cd98d624ba1c1a8169cf
  • SHA1 3cf949f46f9c4f2fb1596a4e23fe6f74804bdcd2
  • SHA512 d1b89ee21309ba428862603fd7cb24ddab5e022042e3600bed2ec5e3397dd7ede3ee7511911fc10b90d1316eeffea21b463bab47ef283302e65fb3b0dba72e08
  • SSDEEP 12288:rf/1P1sed7A9jb6X3Z5nfoNyCFNKIm5SzZZQysZDLgdXy89h6S9f6CCCCCCCCCC5:rTsed7+3g3jfoRFtPZSXZDMdi8h6cf6V
  • TLSH
    T1E3E4AD1DB12C4A86C7E97BFCCAF1DCB502236C996420857269D9F9ABF4B2E514342F43
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  cheatdiscoveryredlinesectopratinfostealerrattrojan

  • Family: RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Family: SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • RedLine payload

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2