Extracted

• • Target

    JaffaCakes118_5abc70d78d57cc18878dbb795f3586f9

  • Size

    150KB

  • MD5

    5abc70d78d57cc18878dbb795f3586f9

  • SHA1

    a90d96b6f10e0323200d606ce1d4023eb6c3309a

  • SHA256

    8ef137a45870ad3d970c1e054e16e8523587d3fe3c0f962a2803807bc4a62925

  • SHA512

    c44e5d6fcf8ad72c1f300772c04642f6049d4c537c143a379f7556a7b5c321575b3c7481ecaf0fd9a3b52393aed02a89d99dbca15159e2353e1648faec56ded6

  • SSDEEP

    3072:H5AKMq8VSyr6GD0sus9zjqazUr1d80y6xaXrQN:H5GVSyrTX9PuC0ym

  Score

  10^/10

  redlinesectopratdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2