Extracted

• • Target

    JaffaCakes118_4048194776d0dae889d354959d793689

  • Size

    548KB

  • MD5

    4048194776d0dae889d354959d793689

  • SHA1

    b725e7b557fd430cb1a7c70f8850f162c62ecc6e

  • SHA256

    731888581104c52116fbe4ad949ad42d8fe1db9778ba2198876a668633b95dc4

  • SHA512

    9c6b5bb2e4c9e777a9b5eccc1627016fa06b2e8fe866377066c96dc598dc16fe3ed79e931f3081aada86a9b07999fe2c809d0a164e0aa84ceb780896bfc5f875

  • SSDEEP

    6144:BqoQfelwFjnZ/TkGKqy03hoM5UJLHB0BG3f:LSeWTZ/IhegzOBGP

  Score

  10^/10

  redlinesectopratdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2