General
-
Target
JaffaCakes118_445990599534816991c6ccf1781763f855e1beff0f2d7f9305a95938edfafbcf
-
Size
690.4MB
-
Sample
241221-xlc7mswpay
-
MD5
95b35f12fb70251d52cc693e147133c0
-
SHA1
1f8c5cc37c24f6ccec159de07edf3fc64104d66b
-
SHA256
445990599534816991c6ccf1781763f855e1beff0f2d7f9305a95938edfafbcf
-
SHA512
a4dfd8e2b3a513425c427f0b131b139e6ff7a69eabd2b2edfbea63a3ceafe54d06163a395e160b64c1e3a2406439637c8addd57e154b7b8050daf940afea0d40
-
SSDEEP
49152:WmVlA7GqB6/KWpXeJpyYmJdIiDix/TYLAbJMZnMw2tNn1Or/GtXEJ+GRgD6Vk3j8:18Na5XeJQpU/sLAKnMwoyXsm
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_445990599534816991c6ccf1781763f855e1beff0f2d7f9305a95938edfafbcf.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_445990599534816991c6ccf1781763f855e1beff0f2d7f9305a95938edfafbcf.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
Meta
109.205.214.6:81
-
auth_value
ff920b9b3b34fa545260b11f0ece519d
Targets
-
-
Target
JaffaCakes118_445990599534816991c6ccf1781763f855e1beff0f2d7f9305a95938edfafbcf
-
Size
690.4MB
-
MD5
95b35f12fb70251d52cc693e147133c0
-
SHA1
1f8c5cc37c24f6ccec159de07edf3fc64104d66b
-
SHA256
445990599534816991c6ccf1781763f855e1beff0f2d7f9305a95938edfafbcf
-
SHA512
a4dfd8e2b3a513425c427f0b131b139e6ff7a69eabd2b2edfbea63a3ceafe54d06163a395e160b64c1e3a2406439637c8addd57e154b7b8050daf940afea0d40
-
SSDEEP
49152:WmVlA7GqB6/KWpXeJpyYmJdIiDix/TYLAbJMZnMw2tNn1Or/GtXEJ+GRgD6Vk3j8:18Na5XeJQpU/sLAKnMwoyXsm
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-