Extracted

• • Target

    e1d87937b8386bfefd1282fc521faeb7_JaffaCakes118

  • Size

    954KB

  • MD5

    e1d87937b8386bfefd1282fc521faeb7

  • SHA1

    3b76226555b97c63c5863c95587704fffb31655e

  • SHA256

    e0995d9768bdcb1e1c30390b61692607b427d2171b9192777a026963d90ae62b

  • SHA512

    c1158a398596cfba30bc0f72be853f779be0beba1cd44961b1c4807dfae0913d91979b3b0f156e2c616457f3c97f17f9b0f5c289ff92da1c1dcfa37a86cabbc9

  • SSDEEP

    24576:op0a41sZb77n6Zv40QIi4BMvZqU13/Ya2Qq/OJBCoHMCbThVFXtmE:zfdgpMcTsGh7dz

  Score

  10^/10

  redlinesectoprat@jizxjizjidiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2