Extracted

• • Target

    5facf69d570b6cf03deca28bd9f545aa_JaffaCakes118

  • Size

    338KB

  • MD5

    5facf69d570b6cf03deca28bd9f545aa

  • SHA1

    419b721f7d194287cb3447c3732426603965e952

  • SHA256

    4ac6e78bf14a825b213dffb029102a9c57bfd7d6f203bbd3259286ce49ed8add

  • SHA512

    8603682e6f0ee1ebd76802933d0274827d28ea7dd78bfe845d9a7ac46ee45a9062b58e0782c121568133bbc5cf56fa230015504e82149c62935168df3f37f292

  • SSDEEP

    6144:RqBAuajNXTrzoG2fVdgzjQIIU+BBXo6eIdq0YMzSgGjouQqEsWT:RFBjNjrzoXEvQrFX5Y0zSdjHCsWT

  Score

  10^/10

  redlinesectopratbigboss10discoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2