Extracted

• • Target

    JaffaCakes118_6e7af58436dd330acd679305a969f28612fe8709

  • Size

    700.0MB

  • MD5

    c7decda57397d034d013b5536c73aeca

  • SHA1

    6e7af58436dd330acd679305a969f28612fe8709

  • SHA256

    3f029bfec11430a509701be362d7e375134b44429369cd27564ba8c2176af4e9

  • SHA512

    337ebf51beb09ebe603150e59cab6e1ed0ad9d3c0a2898885209465945745c8f52434461df0afe14284e72ec46e67a51ebe6e49baf47fba9742a9557af5e61c5

  • SSDEEP

    12288:RSnjoUaYpwPnWZQzjFeM6DJOjB9sTTHylt7cykjmh+KCqsUCWVA/L+Ad5upi2b3G:RUenYQb6VOp+dm+KCI9myb3G

  Score

  10^/10

  redlinews-10-4discoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2