Extracted

• • Target

    JaffaCakes118_533c7fadb142804b28b25567f7bd5908

  • Size

    171KB

  • MD5

    533c7fadb142804b28b25567f7bd5908

  • SHA1

    e0a814639ffd3ff20ed9d9501ef100bf348dd212

  • SHA256

    2120998b72b766eb6c5e9247ca69d751908d08c43b7d82dd35db1118aefa7f6f

  • SHA512

    961e6202ee4927f4972e2ab221a34db44811b100312966aabf7ae622255afc529d9368bc341dbd051a0715639f0625bd8595852b7a292a77cafb4f754424e9d7

  • SSDEEP

    3072:BGolBCNQw7F/drLh7hSWqqwkGzhtbAhiLgY2:MoSNQwR/J1phwXzDEiw

  Score

  10^/10

  redlinesectopratdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2