Extracted

• • Target

    JaffaCakes118_0e12df5cf2c8d72e6d5549ef69034f64

  • Size

    196KB

  • MD5

    0e12df5cf2c8d72e6d5549ef69034f64

  • SHA1

    d6ce7c180f6098a38e1336b1fe15cd1efcf854d5

  • SHA256

    68a4ef34fabfd6c1d88c33ccc45b3c34be33491dd94ee1d45f132da5f932c05c

  • SHA512

    512760619a3084fcf638a762f64cc57858bdd79bf65413e09db18ec1fa58119f3f2ecaa5a1290093442e0f6da194d632abbb9e087648193223a507ad2f2eea0e

  • SSDEEP

    3072:/eUMhfP0OatYl2A/CudbhpaojPgYHhJfy05Ius4xDdxzA/EBL:2LVPFl6OTa6P9HhJfyABdlp

  Score

  10^/10

  redlinesectopratdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2