Extracted

• • Target

    5d3530dc64b81186128e74a56a566bd0_JaffaCakes118

  • Size

    980KB

  • MD5

    5d3530dc64b81186128e74a56a566bd0

  • SHA1

    aa537c96cfab9645c6895fb95334f04f2d42deca

  • SHA256

    7a44b1f84afacff6df3d110e2defad7004255dc52c5253e399871a97e8931475

  • SHA512

    9d6961e41b7a7c69987d7d648feada3e2562333f71486765a3abb325ef5fd52ca5c04778744414425f1e943e7b1eb955174c6b18a69af52a00bc3a2b94451717

  • SSDEEP

    24576:Fp0a41sZb77n6Zv40QIi4BMvZqU13/Ya2Qq/OJBCoHMCbThPs3xWN:AfdgpMcTsGh036

  Score

  10^/10

  redlinesectoprat@treeline300discoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2