Extracted

• • Target

    JaffaCakes118_3f644c6df63687c4dd2dce14fb2f2caf

  • Size

    149KB

  • MD5

    3f644c6df63687c4dd2dce14fb2f2caf

  • SHA1

    174181e38b8a79b37e090c28bcd22a1527096810

  • SHA256

    b3289635b42828dccce10e57b6fc40aad6b9369c402dc97724137efc7c65dc35

  • SHA512

    a1799ce4728a9f2ca4059c1401f754913c41ab204614ca4c8af7d35cbdd8288bb1f156d40bb322120872df0f97489cbbc6af65336d22512a0d643ef1e436a175

  • SSDEEP

    3072:oVYWkvmsmG7KEn3e9tFY9CavuC1RkqVTsG246LY7pilc:oV+hjB3eS9E1qVTsJ4S+

  Score

  10^/10

  redlinesectopratdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2