General
-
Target
JaffaCakes118_31b98e6b868401f59434e04b6f1576f3e5c7b3415c03547255dae66a3b3f3832
-
Size
690.8MB
-
Sample
241227-asc4wswnav
-
MD5
6f08f29d29f20c346f3ce0f48eff9501
-
SHA1
4da2b9b4c09533b69bab68992b104815b47da766
-
SHA256
31b98e6b868401f59434e04b6f1576f3e5c7b3415c03547255dae66a3b3f3832
-
SHA512
9ffa3b0c7415a950c970b726f15b5224100af1c08578aacfd2b24dec6c8a086f67c7419105ca6e5bcb2a70c1bc4b172ad8a5f7db091da3e6c46bce68569d9d03
-
SSDEEP
3072:lX1S3AqhsHHTK5VByymUk3BPtSgeFoxT6Wo+tPS9+7MmA6EtLhps5nz0gwAksmGO:lleAqhm4ItDSgTV09m9+hxG
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_31b98e6b868401f59434e04b6f1576f3e5c7b3415c03547255dae66a3b3f3832.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_31b98e6b868401f59434e04b6f1576f3e5c7b3415c03547255dae66a3b3f3832.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
1420836138_99
dragrun.top:28786
-
auth_value
4aadbeb8eb384fe698f24dde846a0759
Targets
-
-
Target
JaffaCakes118_31b98e6b868401f59434e04b6f1576f3e5c7b3415c03547255dae66a3b3f3832
-
Size
690.8MB
-
MD5
6f08f29d29f20c346f3ce0f48eff9501
-
SHA1
4da2b9b4c09533b69bab68992b104815b47da766
-
SHA256
31b98e6b868401f59434e04b6f1576f3e5c7b3415c03547255dae66a3b3f3832
-
SHA512
9ffa3b0c7415a950c970b726f15b5224100af1c08578aacfd2b24dec6c8a086f67c7419105ca6e5bcb2a70c1bc4b172ad8a5f7db091da3e6c46bce68569d9d03
-
SSDEEP
3072:lX1S3AqhsHHTK5VByymUk3BPtSgeFoxT6Wo+tPS9+7MmA6EtLhps5nz0gwAksmGO:lleAqhm4ItDSgTV09m9+hxG
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-