Extracted

• • Target

    JaffaCakes118_c87e97d9315b30854abd739f75dbd5b8

  • Size

    529KB

  • MD5

    c87e97d9315b30854abd739f75dbd5b8

  • SHA1

    c8e1a1794b64f304f0bd26886446374e3e720f95

  • SHA256

    b7c936e9cd1d1925d71354bf81762f2540d41d813a533f62d9f1982a0639ec99

  • SHA512

    a9176026f30c69e67000f9719b0a41bd9590bbc07fe4d75b7bca7dcb5d6e102d78cb970f757277d775447aadabcd6b8844d535f61c411e7e523aef1ceedd50b1

  • SSDEEP

    3072:yVxn44gS4flE7jEqnzONLIZ9M+twtkb8N3k6AWvJ1vz1ry/6tNZHhiA/P:yVxn4rYEq26skp+vPRlBiA3

  Score

  10^/10

  redlinesectopratdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2