Extracted

• • Target

    JaffaCakes118_7d5a4b8bb53d83cd65c5f6965f4fd97c

  • Size

    1.1MB

  • MD5

    7d5a4b8bb53d83cd65c5f6965f4fd97c

  • SHA1

    09ff7525b6c6c5177cc502e8702fd0d1079bd7d5

  • SHA256

    c1987182c2e94c62a010cef1896c68034d45bd999afe27676a7e62b2d519df74

  • SHA512

    41b8aa01ee77d2dcd2a34e616441dcf99945d5b18b4122b2932d310837c8c2b892d910b3222e643c08a2c4df004b811e2ec65674a53e7e24d23dd94fa97293ef

  • SSDEEP

    24576:0LtGwxuwBVQ8dtvJ8VDQ5aOMR6Zh1gHlnhwIWvam:yt1BVQ8dtv0MIOXZhKH7zWva

  Score

  10^/10

  redlinesectoprat@yoshimitsssudiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2