Extracted

• • Target

    JaffaCakes118_196ad3cf26b25845408b382382feba45

  • Size

    4.6MB

  • MD5

    196ad3cf26b25845408b382382feba45

  • SHA1

    69e35dc23717b2b4710f8945641390248c854e82

  • SHA256

    498303a6c75c398dc2e598565ce482504b7dc3a7a89a26cd5ccce10ce6e9ea47

  • SHA512

    00574de4564c6ae0e317788c2379de6d50593019a38b5e09aadf05380f4c74db702c7f3ce07a95c12d6df6a00b3729045bd4e0c43e1a880c063d3ceee6067cb2

  • SSDEEP

    98304:wLotyuWKLYMolYfIAgD9nxKBIcNYuotXLzWnPLATOVHrK0Kg:69MmYfI6LN3otXLKPqWO0

  Score

  10^/10

  redlinesectoprat@ranisyolo19discoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2