Extracted

• • Target
    ecc809f120efe85c7b664544559af7a2_JaffaCakes118
  • Size 423KB
  • SHA256 886e7a113da0f1acbe2d239ef92c2a02991a9d7f2364a992a6d1cab8fdcb4f4e
  • MD5 ecc809f120efe85c7b664544559af7a2
  • SHA1 4ba87f1251cf800a8c99f50046f016fa6c3d4a3d
  • SHA512 b2cbf800a1014db786b6e0e37e6dbf4009bc8a3c34db3a40a33b2cb8cb8f082296792a9e5a8d60c7467c3902e45bc33bdc65db6189c5010d686152b75ab8ac6b
  • SSDEEP 6144:8JPocubCVNbdq+C/zDiSNfDisAOvknMOtQjyBdUXfb5SMGx53K7IbXf:8xocubCVNbdqTF4tQjQQAF9X
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  redlinesectoprat@under_lztdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2