Extracted

• • Target
    JaffaCakes118_2a25a35ad0e34cb0b9dfdd3533ef7157
  • Size 1.1MB
  • SHA256 b42887645c1d898a85dcc6b175e0b98084094288f70a8e2a396afa6431f6f0f5
  • MD5 2a25a35ad0e34cb0b9dfdd3533ef7157
  • SHA1 ea53fcabcf594e8b46b510ff8c481fb6da44b48e
  • SHA512 2aad11400762e850568a0f834a3b806b94e23c71779913f6bd50a2eb29bb7fe33260b0f09e85a03604da52a3ba1b78058a149f53c5473e9ac2ba6f661262de75
  • SSDEEP 24576:YslbTndYnTjYlmg4AQuP11NUu78S+7n4SYwqK4pLf3RTsqGY1iQ6qCkCJ+hu3A83:YspdY4gg4AWe4
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  ezdiscoveryredlinesectopratinfostealerrattrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Sectoprat family

    sectoprat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2