Extracted

• • Target

    598c257c885f0b71816ff13d27b2579e_JaffaCakes118

  • Size

    1.2MB

  • MD5

    598c257c885f0b71816ff13d27b2579e

  • SHA1

    90acb05b8cb1ab4231b82b9bc569de250d64954b

  • SHA256

    c08a9cfbdce610761ba0a3554c41665865249548074f5d3ae3dbad8513d41da2

  • SHA512

    aff9fdf8f3de7c023c1f6a07051caad0748f71fa16826284bd2aa424c3a78ee98c75f414a532a5b91bab864ff2142475a8319e709ca29c6e1f52849b95ed3e49

  • SSDEEP

    24576:8iHghAkJJEA5SYE2IEj/WKlhFI2+/gkb7PC5srrD9pT:hgm675SPG9FI/1dPz

  Score

  10^/10

  redlinesectopratadsdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2