Extracted

• • Target

    JaffaCakes118_6394c614ce86f0d2bc4c54fa02e3f947

  • Size

    203KB

  • MD5

    6394c614ce86f0d2bc4c54fa02e3f947

  • SHA1

    2f36bf1511f515e524d05ded98dbc0e2f5b1a8a7

  • SHA256

    ad4540346592f3c2a8d7a002f85f7ccb4000aab2dab841c9bd0a3ab9970eac24

  • SHA512

    18b1518f7733d914669131fe14d052bd053ed4992c291941702176cd0b5f35cb17e138e6c1549f54af74e28aab998f9f8ccef95e1a0be9ab2e92e4c1e9a07030

  • SSDEEP

    3072:Lma2Tw13jglOswfrLya3ApH+CNekWJnU0mPjd76ootSc/3smYMXrP:Ln2J1wfrLyaIeCNpWOPjd4BEdu

  Score

  10^/10

  gurcuredlinediscoveryinfostealerstealer

  • Gurcu family

    gurcu

  • Gurcu, WhiteSnake

    Gurcu aka WhiteSnake is a malware stealer written in C#.

    stealergurcu

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Suspicious use of SetThreadContext

  behavioral1behavioral2