Extracted

• • Target

    9d09dc87f864d58294a01108b5fefdc0_JaffaCakes118

  • Size

    475KB

  • MD5

    9d09dc87f864d58294a01108b5fefdc0

  • SHA1

    522fd81fd14e25381aaa0834fb9dbf7420f823b5

  • SHA256

    0f0a5dcbb18f1dc67dd1f75b5f2a98f60d7913b35440d9f7533e3f6582ca9937

  • SHA512

    d988688dd7af056bb0fd554ca95468fe83b4182d70120fa5d60ed1d744baed3a389c312fda5d912b37c60122a6b80a9278908fe80cb4054caf648f5ea7683801

  • SSDEEP

    12288:iHg/jl0AZD/G2iN4amYwQb9OYyp9osPbx3:bjGAtG1FvfyjosPbx3

  Score

  10^/10

  redlinesectopratproliv222discoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2