Extracted

• • Target

    JaffaCakes118_e1a868fa9783bf728ea755a356a51243

  • Size

    4.7MB

  • MD5

    e1a868fa9783bf728ea755a356a51243

  • SHA1

    485d477216db17721bc5e12ad88294048fbc744a

  • SHA256

    a3008a9b896e06ec41b0e73ecd41030be73c5134c6a37272690de77bb0edf80c

  • SHA512

    cde498572c247203d10b0d0cdb58c75180714a31fe04208227d74c5ec76c9fea4612ca666aab7b09b58b932207d555a0ee2a5462b5e8a25c3ede2b81841c1e71

  • SSDEEP

    98304:IL9fruNRPSE1HsEumburEDOwOokXRBtOXRotZqCmg36mH:r/PVQrCHJmRB6otc836

  Score

  10^/10

  redlinesectoprat@usernamep1pdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2