Extracted

• • Target

    7a23a664673dcbde202217eb55d531b6_JaffaCakes118

  • Size

    1.1MB

  • MD5

    7a23a664673dcbde202217eb55d531b6

  • SHA1

    ed299494c15f01630875d96972ca21c36ebf0304

  • SHA256

    edc3e23934d50165f87e276b405ba0e967f06c0c569b344315fe3cce42e7a0c5

  • SHA512

    adc16cbfd93327edbea07b4c959f51bad08f6a964e4edb3c225c0c2e6fa1527c928c4edc85480ea7a91f5a78cb17b19c8c47ebc04cd65dca411b32adf64e32d6

  • SSDEEP

    24576:PtBlRfGG8NvnnerZZfL2D+OPoF54gEu72H0gXXfr143ZcV:rvfsNodL2D+OAFmcY4w

  Score

  10^/10

  redlinesectoprat@freezjdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2