Extracted

• • Target

    JaffaCakes118_ea3740a493711372b2da51dffaff8ba9

  • Size

    156KB

  • MD5

    ea3740a493711372b2da51dffaff8ba9

  • SHA1

    9cc76f3cf22d6f6a2f5a8beeef680fa375bbbb13

  • SHA256

    d055158919303618dd79d0a6224de0fabbf28f7ab8daa9690b385e0b2b90a8d4

  • SHA512

    40102f647f583167b332561831369de5c73e6b4e6a29991baca59d859daed05ce209eba59bf74cc9b80cb8033a9c041f25e2154dcc43f75d4fab1932be780ce5

  • SSDEEP

    3072:T4WHLrhFy/MgFR5FtZhQOnBJHfSY/vbywd3qFqNyoP6cH+N4KhzKV:T9HLrkPTDHBJHfSY7F3soCTa7

  Score

  10^/10

  redlinesectopratdiscoveryinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2