Extracted

• • Target

    JaffaCakes118_694c250454d428235562b4b4b11a431c

  • Size

    156KB

  • MD5

    694c250454d428235562b4b4b11a431c

  • SHA1

    714aeb91f3a7fe25925e1ae5d62031e34314c8a7

  • SHA256

    a6794c613a8c04404efcebce43ec1a6b44d25ac991b68183b32d4a1379d59b0a

  • SHA512

    c84b7b58ed3f47f5220c3dbb04500de29bd32ddc54f5cf85fa741a1f9ec30b56476fec033f750bbeb9624866b41b2071a79fd06b73b55cb80afc7160728d18dc

  • SSDEEP

    3072:jKX/y3KX20bPwlP4fNMVncHQi2KK4EnEH+36kGfHvuCUXdl:eXO90bwl8NM1cHF2Ki365PvuF

  Score

  10^/10

  redlinesectopratdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2