Extracted

• • Target

    ff2de7af645bea1f0d0b2a1efad90ee9_JaffaCakes118

  • Size

    1.2MB

  • MD5

    ff2de7af645bea1f0d0b2a1efad90ee9

  • SHA1

    a9db492ec5a4e676911909fb9db2709a7ef5598c

  • SHA256

    7c995b2cba9072f5c246f333e7ad9b4302f836babf9fe90bab766251c432983d

  • SHA512

    7504fb9cbecc27218beefcb72a3820328bca240e9c3a4ddee0577def884a97d204056504e635ba14624ada9ffe7486d6cc3b1b2dd06eef75e3434fa480ab6995

  • SSDEEP

    24576:1CNBWDJGTDlp1JSQ4H43EpDlch7eBnuRDKe:KWVGTD31JGH43Epah6BnuR

  Score

  10^/10

  redlinesectopratgrekhdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2