Extracted

• • Target

    JaffaCakes118_be65927ba986fea781a415c4f17a71d6

  • Size

    204KB

  • MD5

    be65927ba986fea781a415c4f17a71d6

  • SHA1

    b954a047a5fc747554c524c502634afc0a5b8333

  • SHA256

    fe2b724bf92fbda7ef2cbe4026662e12823aa29c309e04af7cc3b8ad8ddf25e7

  • SHA512

    5e5603b39f5e1e9c2d9f7f21088fe03cf200a4dddfddbca06df02052f04af8d2386ce5816bd3ae7a1eed2347af5843b431bfcc3bb1c8111aa05971a645cf8c3c

  • SSDEEP

    6144:leUhxzk8EYGb3WAk1TjOLxXLLZLLC/isUn:lthxzzhGbGAk1i5n

  Score

  10^/10

  gurcuredlinediscoveryinfostealerstealer

  • Gurcu family

    gurcu

  • Gurcu, WhiteSnake

    Gurcu aka WhiteSnake is a malware stealer written in C#.

    stealergurcu

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Suspicious use of SetThreadContext

  behavioral1behavioral2