Extracted

• • Target
    9d8ea383d735302930a2ba10ca17dd9ffe87f1b1ae0968777900ebe4a9ec6e2c.exe
  • Size 516KB
  • SHA256 9d8ea383d735302930a2ba10ca17dd9ffe87f1b1ae0968777900ebe4a9ec6e2c
  • MD5 4af5a50bf18ca67d6ddfa8d8b670292b
  • SHA1 4ae62923ebe646be41cddfafa4b1b9f42f9ae393
  • SHA512 62cd6bc4fbf102696f818daf21477f0deb13eb50e761c68d85e658ec0451ae876f38428e272325f10b2c2c0ee3f5f072fc4f75a2dce8bc10acd6f8dea88bbc84
  • SSDEEP 12288:dVITn6LpSDPBNa7eXayTzP3NbMOXbEOx:y6LpSBFTnXbEi
  • TLSH
    T1BDB4F158135AC902C8921FF50972E3F80F784FD9E962D313DFEA7DEBB93A9541880259
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  cheatdiscoveryredlinesectopratinfostealerrattrojan

  • Family: RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Family: SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • RedLine payload

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2