General
-
Target
JaffaCakes118_1a7167a869f1dd6d76993554473ac034a3d2fd0348f6e3af7dfb8ef4b08efc7f
-
Size
848.4MB
-
Sample
241225-thcj6axqep
-
MD5
958b433194ee34769ca0f41199816247
-
SHA1
4aefeecd0cec662f990763ea9bd725dfdd26d116
-
SHA256
1a7167a869f1dd6d76993554473ac034a3d2fd0348f6e3af7dfb8ef4b08efc7f
-
SHA512
a9956c90d3505a5da81a82c5a58fc2e4be2ed5baaafdd74de4a712e6b5fc21eeaf60eab0ef8155d3e0b3bd0ef865fd9745c265a99e320553e629a1d01e51c58a
-
SSDEEP
12288:SDlEtGp/N7yKB9UyTLrY1XzBlflu2qwV6eyJGAJXhmq/8Z:4GGp/LrYdfxV6T
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_1a7167a869f1dd6d76993554473ac034a3d2fd0348f6e3af7dfb8ef4b08efc7f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_1a7167a869f1dd6d76993554473ac034a3d2fd0348f6e3af7dfb8ef4b08efc7f.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
95.216.94.138:4328
-
auth_value
a909e2aaecf96137978fea4f86400b9b
Targets
-
-
Target
JaffaCakes118_1a7167a869f1dd6d76993554473ac034a3d2fd0348f6e3af7dfb8ef4b08efc7f
-
Size
848.4MB
-
MD5
958b433194ee34769ca0f41199816247
-
SHA1
4aefeecd0cec662f990763ea9bd725dfdd26d116
-
SHA256
1a7167a869f1dd6d76993554473ac034a3d2fd0348f6e3af7dfb8ef4b08efc7f
-
SHA512
a9956c90d3505a5da81a82c5a58fc2e4be2ed5baaafdd74de4a712e6b5fc21eeaf60eab0ef8155d3e0b3bd0ef865fd9745c265a99e320553e629a1d01e51c58a
-
SSDEEP
12288:SDlEtGp/N7yKB9UyTLrY1XzBlflu2qwV6eyJGAJXhmq/8Z:4GGp/LrYdfxV6T
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-