Extracted

• • Target

    JaffaCakes118_bac410050f270ab132cafe559782fba0

  • Size

    236KB

  • MD5

    bac410050f270ab132cafe559782fba0

  • SHA1

    417405e96738f9c8e18d77001a5c8da5401ddf39

  • SHA256

    347b038001b5f691162c1cd11b1e2f78f56f4316faaa8843361a38f8d5d658dc

  • SHA512

    1499ef9847387fd09adf5f78e9dea347bccd184952c2e88d089218a2298b0a6c4016dda245618776d7d8fe5302eb1f71ba9c7d7350c2bb9b00fef4bdfcdf81cf

  • SSDEEP

    6144:40D3qE6SE/zzE1tXLOaAg3zzhGQWtNxepT:+t/o7SgPhGJNwpT

  Score

  10^/10

  redlinesectopratdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2