General
-
Target
JaffaCakes118_c016c9343b417230df66f2c2148811f27ca25f3363c682d3440e3893dedd5dbd
-
Size
437KB
-
Sample
241227-b2ws2ayjhq
-
MD5
99391680e3bcedf82db64babea33abb2
-
SHA1
d35c9932d55e227d990a7a55d379f6b53e9246ca
-
SHA256
c016c9343b417230df66f2c2148811f27ca25f3363c682d3440e3893dedd5dbd
-
SHA512
16f31e8bd07dcaf58ada9d9f23f8620c5f69cde25cd9726f750d189e809a4652499e060d590abf958184ccec85483af79de82229e3407806ce4595a4af5139bb
-
SSDEEP
12288:2Ffs9HlEZBK4dxybglYn/0kWQTokMJ5aoAoyqkNYx6iTd2+:2SlSrPTYnsJ5GN1a
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_c016c9343b417230df66f2c2148811f27ca25f3363c682d3440e3893dedd5dbd.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_c016c9343b417230df66f2c2148811f27ca25f3363c682d3440e3893dedd5dbd.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
RUZKI
185.215.113.29:34865
-
auth_value
7787ecc647f66a171613d91bd46a7ce7
Targets
-
-
Target
JaffaCakes118_c016c9343b417230df66f2c2148811f27ca25f3363c682d3440e3893dedd5dbd
-
Size
437KB
-
MD5
99391680e3bcedf82db64babea33abb2
-
SHA1
d35c9932d55e227d990a7a55d379f6b53e9246ca
-
SHA256
c016c9343b417230df66f2c2148811f27ca25f3363c682d3440e3893dedd5dbd
-
SHA512
16f31e8bd07dcaf58ada9d9f23f8620c5f69cde25cd9726f750d189e809a4652499e060d590abf958184ccec85483af79de82229e3407806ce4595a4af5139bb
-
SSDEEP
12288:2Ffs9HlEZBK4dxybglYn/0kWQTokMJ5aoAoyqkNYx6iTd2+:2SlSrPTYnsJ5GN1a
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-