General
-
Target
JaffaCakes118_0587fc7e472f2cd8aca9f05d0b157385
-
Size
684.3MB
-
Sample
241221-3ley5atnhz
-
MD5
0587fc7e472f2cd8aca9f05d0b157385
-
SHA1
ae819920b6d3d515a25191e83e23bea3c4d4f529
-
SHA256
2b1370889a28823e8691860898d6446780c75768530708449f01f46e30950937
-
SHA512
2f28491ced624a9296538b165127d01232c46e95b0d2b115676f4210eb7da5ac0d7befa9bbfdc8971c3e84a89e7ae2edc66a4f18c2272b7c3d84817663bd03a7
-
SSDEEP
24576:kqhslWNk2XlaaYpYg/indb6FM+cduKMgU0zSLkBwnRpVo04DAL1NgPNv8l3RuQ5T:EANXlCl8wkApVo0WAXSv8l3
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_0587fc7e472f2cd8aca9f05d0b157385.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_0587fc7e472f2cd8aca9f05d0b157385.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
@Seo100ez
167.235.227.36:14055
-
auth_value
3b7a547ac6c305f74346447dd879d8c2
Targets
-
-
Target
JaffaCakes118_0587fc7e472f2cd8aca9f05d0b157385
-
Size
684.3MB
-
MD5
0587fc7e472f2cd8aca9f05d0b157385
-
SHA1
ae819920b6d3d515a25191e83e23bea3c4d4f529
-
SHA256
2b1370889a28823e8691860898d6446780c75768530708449f01f46e30950937
-
SHA512
2f28491ced624a9296538b165127d01232c46e95b0d2b115676f4210eb7da5ac0d7befa9bbfdc8971c3e84a89e7ae2edc66a4f18c2272b7c3d84817663bd03a7
-
SSDEEP
24576:kqhslWNk2XlaaYpYg/indb6FM+cduKMgU0zSLkBwnRpVo04DAL1NgPNv8l3RuQ5T:EANXlCl8wkApVo0WAXSv8l3
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-