General
-
Target
JaffaCakes118_4591dd6a6df85da645b578bc6dd09bb95c3dcca07e90d621823a5d685335ec33
-
Size
747.6MB
-
Sample
241225-1dackaykcv
-
MD5
bd2ab593a87f38d97eeba128004922cd
-
SHA1
4c4d27287989d2c3ad33360ebe0c716fbd28335a
-
SHA256
4591dd6a6df85da645b578bc6dd09bb95c3dcca07e90d621823a5d685335ec33
-
SHA512
231fc7e569dbc350493a05c41b229517dbe1bf36b9b81143ce20dee16b4a9bdf01dde87f75bcc7e316c12e668b9803b255a0e3afebf74a5a87912697f17354fa
-
SSDEEP
6144:WzjZ0wW+53t2QWJiyDN5uwER5yT330bqSRqnvRfWbR8m6:K0+53eJiyDNcSsRQ
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_4591dd6a6df85da645b578bc6dd09bb95c3dcca07e90d621823a5d685335ec33.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_4591dd6a6df85da645b578bc6dd09bb95c3dcca07e90d621823a5d685335ec33.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
1420836138_99
dragrun.top:28786
-
auth_value
4aadbeb8eb384fe698f24dde846a0759
Targets
-
-
Target
JaffaCakes118_4591dd6a6df85da645b578bc6dd09bb95c3dcca07e90d621823a5d685335ec33
-
Size
747.6MB
-
MD5
bd2ab593a87f38d97eeba128004922cd
-
SHA1
4c4d27287989d2c3ad33360ebe0c716fbd28335a
-
SHA256
4591dd6a6df85da645b578bc6dd09bb95c3dcca07e90d621823a5d685335ec33
-
SHA512
231fc7e569dbc350493a05c41b229517dbe1bf36b9b81143ce20dee16b4a9bdf01dde87f75bcc7e316c12e668b9803b255a0e3afebf74a5a87912697f17354fa
-
SSDEEP
6144:WzjZ0wW+53t2QWJiyDN5uwER5yT330bqSRqnvRfWbR8m6:K0+53eJiyDNcSsRQ
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-