Extracted

• • Target

    JaffaCakes118_5fbd90c939bdc26565e6570f3d2b3cac

  • Size

    154KB

  • MD5

    5fbd90c939bdc26565e6570f3d2b3cac

  • SHA1

    0fb7d3d08d0675ff8ae1af8abe9b4f2b22eb562d

  • SHA256

    e3546eeddaaa8ac1ff834f84d72b5ca3268e874cd2280d8bc1be950c740a1fa7

  • SHA512

    4c9de32ccc84d200293929b9a113d913fd995e971798c7758bbe5670371cd85d5e375011df1f8fc4f38a9969f3bdbe9bbc3b4cbd4d92148d8bb77514679d5950

  • SSDEEP

    3072:FLwhtibF11NYIkFmBbWVhOnVPlJjC4HcCp11TcpPtTqijd:xwrYlYilJjCo1GPf

  Score

  10^/10

  redlinesectopratdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2