General
-
Target
JaffaCakes118_413509aefed88127d7b49ef88f0efe5f56110663ecac03d6acd056214d5ba378
-
Size
725.5MB
-
Sample
241225-zqnkaaxpdl
-
MD5
f786b427d03380e2025c01cbf05458f3
-
SHA1
bd3539ee46d331362585adbba4c2c052e6dcf30d
-
SHA256
413509aefed88127d7b49ef88f0efe5f56110663ecac03d6acd056214d5ba378
-
SHA512
391bad193c2e6be6af516acf32ac4f55b635cd90d0063f4e0c5ffbe012bac4812111f0258942936de21062f210aeb16d94384e66f192c576561257c3cbb51645
-
SSDEEP
3072:r2PZ8jUCs00ByIAgv81fODwUtAeXaL4KWMx91oR:r2ZgU50lggfOFtAeXaLP1o
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_413509aefed88127d7b49ef88f0efe5f56110663ecac03d6acd056214d5ba378.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_413509aefed88127d7b49ef88f0efe5f56110663ecac03d6acd056214d5ba378.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
5021691298_99
myodissey.top:28786
greengard.top:28786
-
auth_value
ed01e2eab154bcf8c14a95d99e0e21c0
Targets
-
-
Target
JaffaCakes118_413509aefed88127d7b49ef88f0efe5f56110663ecac03d6acd056214d5ba378
-
Size
725.5MB
-
MD5
f786b427d03380e2025c01cbf05458f3
-
SHA1
bd3539ee46d331362585adbba4c2c052e6dcf30d
-
SHA256
413509aefed88127d7b49ef88f0efe5f56110663ecac03d6acd056214d5ba378
-
SHA512
391bad193c2e6be6af516acf32ac4f55b635cd90d0063f4e0c5ffbe012bac4812111f0258942936de21062f210aeb16d94384e66f192c576561257c3cbb51645
-
SSDEEP
3072:r2PZ8jUCs00ByIAgv81fODwUtAeXaL4KWMx91oR:r2ZgU50lggfOFtAeXaLP1o
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext
-