Extracted

• • Target

    JaffaCakes118_5cc0814b14145d09c2a4595cc54525af

  • Size

    4.6MB

  • MD5

    5cc0814b14145d09c2a4595cc54525af

  • SHA1

    8d35d877feada3706e16324f7a07406c9fdec663

  • SHA256

    077e3b1132f9d0ca998ae19e7aeba2a271b0a2c22b1a48ab931a2e6437dd0db0

  • SHA512

    262f054dedcd4c401643d4f7ed701e07b8c3d0ed5c742bdd9ad0c2128235685affebd5a70a5b84413e4c6a8c286d2e07f017e231ba30ea8a254dbabf74d33a9a

  • SSDEEP

    98304:HLzp3rVyIunDAK1baMh071rbhGmOPcTx0xEf:npcj1mMh0hrbhr+af

  Score

  10^/10

  redlinesectoprat@realniga1discoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2