Extracted

• • Target

    JaffaCakes118_9f8d6700e2f60654d709ee22ff3669fc587792ac3dd41cc0766b7a345d72b3a6

  • Size

    655.4MB

  • MD5

    05ce840729abf60820faa24bfa4b549e

  • SHA1

    82ee8ad907365e1f637860b97e241f81e326ae22

  • SHA256

    9f8d6700e2f60654d709ee22ff3669fc587792ac3dd41cc0766b7a345d72b3a6

  • SHA512

    4d13082d53adf0983a9475ab87f74202ade2efa218b9f81ad73de76a00498049056f1c5791f0a98780d6b66b0eb67e39c3b7aa41d10972c8ef0f749d3dd4d417

  • SSDEEP

    98304:VFCKrvYDbcb4yaHSqf2/1MlE1j55ca/XfrLSNecHVJgwONMqlWhWoWGbOa:LCK0wby5edPlOabuNec1JvqroWGCa

  Score

  10^/10

  redlinenytujcwerfdiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2