Extracted

• • Target

    cff8b3ec4f738a35ce344f37ef7fad2e_JaffaCakes118

  • Size

    427KB

  • MD5

    cff8b3ec4f738a35ce344f37ef7fad2e

  • SHA1

    e6bd276f3357f448aae5f8e7ffaa3e224878c521

  • SHA256

    a9da6842a63ccf687356ae2edf7719e8179bba25c7e8b768073f9ed53b44ef0d

  • SHA512

    181937409b7606f7488225ce2820969d7805c514609e39f304e4339a03bc65dfc9e18b9dc794901cf6949d5c33e9fce516426a389f4dd441c44c83ea262fdf60

  • SSDEEP

    6144:TReYcuJPlpLr94w6vTZ2oyfmi+/ZAOLofMOtQjW1qDjTTpOzglh3ZnY1Yif:TgYcuJPlpLx4Dp/ZlGtQjWE/TCE0Yi

  Score

  10^/10

  redlinesectoprat@bebrik12333discoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2