Extracted

• • Target

    445f4b27dc59acb1cc9e6cfc5a6c6948_JaffaCakes118

  • Size

    1.2MB

  • MD5

    445f4b27dc59acb1cc9e6cfc5a6c6948

  • SHA1

    02af91381b97158e08a0121621b60c655c059c7d

  • SHA256

    9c4631457c9aa93cea0bac70484bca6c1e46408e5d819ed0656cd883bd58b7aa

  • SHA512

    c3193c31da62c19e7893d3f23a687bd75691ba097320d69b1ef5f55059b983c180ad10f23214f60300b7fafb5c3c98584c602219364e87c67954b47bdb1eea1e

  • SSDEEP

    24576:e1vLwYUQX/PirFRE8Ye/TSfoxPqOdUEy81FlFi9X46YQLjgDZ:elUQF7yTSfoxPqKUdjX4Bk0

  Score

  10^/10

  redlinesectoprat1discoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2