General
-
Target
JaffaCakes118_ef55192622e85753fe09db47fc4217307b3464a9a8b453fb45fb500033e87dce
-
Size
662.1MB
-
Sample
241222-psttzaynbm
-
MD5
afa39cb1ff4f7e1e365e4f2cf8dbda86
-
SHA1
3715a346d08b2ccc83df3e7fc09195d6bc5540ce
-
SHA256
ef55192622e85753fe09db47fc4217307b3464a9a8b453fb45fb500033e87dce
-
SHA512
ac0d24b67b40db9810e8293aecfc385fbccd75a48719d92276689eb2d9c0bf45cc7c0867a8c20df53ba3059c8be36f2d5ce45ac7790ecf1138d9b70da7f3ac45
-
SSDEEP
3072:2hDcqTtHT/0irRywttbr0JyyhITvr6mj3iKWzBvRWaM9cQfBI2fx:ADcqTtHT/0sywttbrW2vrTyKIUPXp
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_ef55192622e85753fe09db47fc4217307b3464a9a8b453fb45fb500033e87dce.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_ef55192622e85753fe09db47fc4217307b3464a9a8b453fb45fb500033e87dce.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
729618041_99
dragrun.top:28786
-
auth_value
b4f0cab8b56f02698225c433a3d09ff8
Targets
-
-
Target
JaffaCakes118_ef55192622e85753fe09db47fc4217307b3464a9a8b453fb45fb500033e87dce
-
Size
662.1MB
-
MD5
afa39cb1ff4f7e1e365e4f2cf8dbda86
-
SHA1
3715a346d08b2ccc83df3e7fc09195d6bc5540ce
-
SHA256
ef55192622e85753fe09db47fc4217307b3464a9a8b453fb45fb500033e87dce
-
SHA512
ac0d24b67b40db9810e8293aecfc385fbccd75a48719d92276689eb2d9c0bf45cc7c0867a8c20df53ba3059c8be36f2d5ce45ac7790ecf1138d9b70da7f3ac45
-
SSDEEP
3072:2hDcqTtHT/0irRywttbr0JyyhITvr6mj3iKWzBvRWaM9cQfBI2fx:ADcqTtHT/0sywttbrW2vrTyKIUPXp
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-