Extracted

• • Target

    JaffaCakes118_c7b9278af8c09dc19600939452d83b42

  • Size

    154KB

  • MD5

    c7b9278af8c09dc19600939452d83b42

  • SHA1

    5cfc00ce7837376f8e927b170012f72927753df9

  • SHA256

    c2564a9d2c6514272a9141bc3db5de2f4c12ca41d2eff222486d5fdae481dfcf

  • SHA512

    7921795ac915450fb07e96a2e597ab94d485f1ca0fca069c3d39b2fd54afb767069211908b53b8d96a65e703f5d3c5f78f0bb68e8368bd09fe55fb551030e264

  • SSDEEP

    3072:mLQNVIrcirkfRDqFKv+8Ba2nsaK4MBRFnq1gfC5jv4rFijir9:EI2ciyTm8fK4WffC5jYF

  Score

  10^/10

  redlinesectopratdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2