Extracted

• • Target
    jaffacakes118_e73c26cfa5ddfad7ecb53412b9050b24_JaffaCakes118
  • Size 715KB
  • SHA256 1902475d24a88ba4745e068e22815fa1dfdd703db2a121782263ddaa41fa3f36
  • MD5 e73c26cfa5ddfad7ecb53412b9050b24
  • SHA1 3b1d67ca17c9d8e2d25e4ae5acbcf07a308835e8
  • SHA512 a3a6c290b4879e33612fc810faed58278f41435c597eb9c6df4b962a32b38d9c4c8f88ecbe99aba3294d2325d6ee9209f033918dcde388be462394465561fe40
  • SSDEEP 12288:n7PbMfT0mA9ZbOkyIqJitZ6r1LwtQjQQiE3sodVGlAP/f490Dp0oVSpbjeni/:nLNXJqKZa5jQQiE3soduAP/f49Y0wGIS
  • TLSH
    T1C1F4CF2131779C62E0B818358E7CB9AE596D2D311F2F219BB39012365A78770B7337E6
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  new1discoveryredlinesectopratinfostealerrattrojan

  • Family: RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Family: SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • RedLine payload

  • SectopRAT payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2