General
-
Target
JaffaCakes118_c30ff37d9f00009c8f8b831b9a67e58149bf84f32e686ad36ce95ed88ad46fd4
-
Size
690.8MB
-
Sample
241222-d7pm1ssjew
-
MD5
91f003873e0c288298221041c79273e8
-
SHA1
1552a112818611ec10c49f59335034508098ab99
-
SHA256
c30ff37d9f00009c8f8b831b9a67e58149bf84f32e686ad36ce95ed88ad46fd4
-
SHA512
849ded85ef1f5171f45aaf482687a732904bb17787c525201bcfacabdea67d5e59775d8af2401d4f1a0f0bad333e424ba2959fb3bd15b71fe1c614274dfb8313
-
SSDEEP
6144:ymyeiv6MkSKtplXqdYf43iwAga3Rb+NnsVRu1Herg4CRtHB:/yew6FrvXqVFW+NsVwHB
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_c30ff37d9f00009c8f8b831b9a67e58149bf84f32e686ad36ce95ed88ad46fd4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_c30ff37d9f00009c8f8b831b9a67e58149bf84f32e686ad36ce95ed88ad46fd4.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
pro01
45.80.207.18:37540
-
auth_value
b3c04bd17d77e501836fc397014fe57d
Targets
-
-
Target
JaffaCakes118_c30ff37d9f00009c8f8b831b9a67e58149bf84f32e686ad36ce95ed88ad46fd4
-
Size
690.8MB
-
MD5
91f003873e0c288298221041c79273e8
-
SHA1
1552a112818611ec10c49f59335034508098ab99
-
SHA256
c30ff37d9f00009c8f8b831b9a67e58149bf84f32e686ad36ce95ed88ad46fd4
-
SHA512
849ded85ef1f5171f45aaf482687a732904bb17787c525201bcfacabdea67d5e59775d8af2401d4f1a0f0bad333e424ba2959fb3bd15b71fe1c614274dfb8313
-
SSDEEP
6144:ymyeiv6MkSKtplXqdYf43iwAga3Rb+NnsVRu1Herg4CRtHB:/yew6FrvXqVFW+NsVwHB
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-