Extracted

• • Target

    JaffaCakes118_521c88c95f9c017b5f8a245a54810446

  • Size

    248KB

  • MD5

    521c88c95f9c017b5f8a245a54810446

  • SHA1

    529ed1259c99a0e2eb3a0cf76fdcd2bba00b2b47

  • SHA256

    a3a91fc618f10040d8dbf11d739e3ba951bb704df42ee0b41e3974c1446bb341

  • SHA512

    213d3967458b5cc33b63d8d97d9f74b4331f18fe362bcfd56062ca3af9bdecf9d9762caccf93461974664bda0bf787f74bcb26dec9e56ed7f93211fc0b7cb8c7

  • SSDEEP

    6144:gMTu+qk2Uw8DIwjEnlHzrCR3RJjuDRHTEIINb3:T4u5joRzWFjuNzEpNT

  Score

  10^/10

  redlinesectopratdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2