Extracted

• • Target

    JaffaCakes118_4ada63989352828ff9df7a4a7dd6c4f8

  • Size

    4.6MB

  • MD5

    4ada63989352828ff9df7a4a7dd6c4f8

  • SHA1

    fd912f8f542c4848acef1c04ccb61629e073eeca

  • SHA256

    26dc50039039237dfe570efaf3bc51be0517339f138e660ac86c2602b29b54b2

  • SHA512

    b4adb18529a9d5643abac8e740417abc83460b1d20a43feaf36570e2c68f36666ead60320ac79183e97d0bf79ecb94871743d78652873329409946fd12c3865a

  • SSDEEP

    98304:pLn6YTPEtnJ+4cCZBkuI0x3WlqEHBH2gcqv8p1jukT3xt:0t7cCZaWxREhH2MEq63r

  Score

  10^/10

  redlinesectoprat@frecorediscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2