Extracted

• • Target

    8d6b135d96ff48d1f3e63472217439bd_JaffaCakes118

  • Size

    1.1MB

  • MD5

    8d6b135d96ff48d1f3e63472217439bd

  • SHA1

    5ee88a0c00eaaa65c8c6b9dcc854218a0a9d7f41

  • SHA256

    f2902d95a0b592aba3ee624dcce02c40b9ab8b8b10c7636a4dcfa628e62354e7

  • SHA512

    25b04a49d58fa137328fe64e3ef9298d98dd5508802940f18e5115d31857dcc247ced71c9fcf2c0b429f212a75623aa9f0bd2d31e9349ce7d5f09def3cdb3cb6

  • SSDEEP

    24576:IW5eI6QAdtdt9GgAx7/qthIWw35KdOftpL1Y5XQcnK0gj9l:Ioeke7AtKPw3EarGln

  Score

  10^/10

  redlinesectoprat@maksym_kotdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2