Extracted

• • Target

    2caaab498a0de0953706637fd3eb7c89_JaffaCakes118

  • Size

    1.0MB

  • MD5

    2caaab498a0de0953706637fd3eb7c89

  • SHA1

    ef1099a303d1f071b65fd7b09a6ee09518c0d596

  • SHA256

    59df9a79c9427c68333183ef04cabb510664718031c9d4fe0db8e54a3cf84646

  • SHA512

    fc93bfd3f8cb9872afc31f00ce88cb53aca069a0d6dda97c219ea41ffd4ecd4a3731706d356c347e80100bc050c600fdfe4e30c8a31070cdb6c7df9d856c13cf

  • SSDEEP

    12288:AS+LD3evUkYmtJKL4/aSUrppUiOsTq2fCVMDNRy4Kv5Ze/zAWrsNqtQ:Ann8qtQ

  Score

  10^/10

  redlinesectopratdkv2discoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2