Extracted

• • Target

    6830bb04b52643e9b39839740304d021_JaffaCakes118

  • Size

    432KB

  • MD5

    6830bb04b52643e9b39839740304d021

  • SHA1

    582216be776afddd9eeb2e868fb54f45c9826f99

  • SHA256

    df3694b85648ab86774f29af8995d84b6c3caa9e6bbac21239a63e07e5ca55fc

  • SHA512

    30ba0a784759b9829604a46ef533bee64f06995fa66806a2b1de092e1b2d2cd35104fdbe08668ad02250940fc80a1e088b43e2609b8ea6cd014370fd07e7c5c4

  • SSDEEP

    12288:ziG4NhsSmPGW6iUSZsCeyQ1s5Gji1LZieVlHFz:iN6SmPGW1zZPenusclH

  Score

  10^/10

  redlinesectoprat@koshachuydiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2