Extracted

• • Target

    dedfaa24909d03522a814068f9c00d5d_JaffaCakes118

  • Size

    377KB

  • MD5

    dedfaa24909d03522a814068f9c00d5d

  • SHA1

    d8a51ad14cb27a6f5db825792972251b804ed82f

  • SHA256

    6f14afbba1fb3f07259d7153604a7877f9a0be968b600e2f82b6b491d4e994a6

  • SHA512

    f8a8bd970637fb68c415d5e9d55b09f8b70eb7c723579ab32c450d44c9eb220e4161c590703d0df1085f5d071bd5b294dab33bec94d26f9e39bee3cd40d5884e

  • SSDEEP

    3072:5rSs3HBUx5R1GdCLElxr3s870TRPnT8/nEcgAfIiAwNp3JPxgfu6noIXrQKTn:VhUfR1GdCLElxr3srTRr8/nEcgVwot

  Score

  10^/10

  redlinesectoprat@sellerlolzdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2