Extracted

• • Target

    JaffaCakes118_b1d8773c17b6860ca7f4343f289ee225

  • Size

    548KB

  • MD5

    b1d8773c17b6860ca7f4343f289ee225

  • SHA1

    c45a66a4156e22c02f8f462bfa435ff1ce5a9044

  • SHA256

    122c4604b5fe134d8965ca39d49b7780ff907ae680e65a90bd53eb5259d41491

  • SHA512

    5879dd9f400576848ce623b6332e3a58c82375d419361ec4c33a2ea9ab24372488b43d0c93cdeea85cef5741e5178328b0d90027cb0e6384af8847b2c4847a26

  • SSDEEP

    3072:d24zEvzhgxnNm5o5baNRYW5U24Ds05ZHLs2t6K3w02SqJICnI2pMjnYF:dhzEuxnEo5eiWS9s+HLHtXfqJICnI01

  Score

  10^/10

  redlinesectopratdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2