General
-
Target
JaffaCakes118_bbb88d043d38be1329f6d4a1a419639ed37ee3be6cb0e28819cb7cd668af93ee
-
Size
677.8MB
-
Sample
241229-3n3g7szrgw
-
MD5
449274723dd5ecf981189765ccd1591b
-
SHA1
c13de19d75a9929a8fdb7b0a6289aee762ef32cf
-
SHA256
bbb88d043d38be1329f6d4a1a419639ed37ee3be6cb0e28819cb7cd668af93ee
-
SHA512
f04cff591f16a5b147e18304cdcc377dd5d668c4825eadab6ed71b098419908c5498fd7e75ffc1bbb42629464ff768e5058eababdb3ec4dcefff33752e7275c2
-
SSDEEP
6144:rHFIQG//xJO+JcPGeltT0daPXxKfy0NMYE5eQQQH4mfXPb1AOlUOtxs:5IQi/xJO+JcPG24fyQjuHY4/b1fUaxs
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_bbb88d043d38be1329f6d4a1a419639ed37ee3be6cb0e28819cb7cd668af93ee.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_bbb88d043d38be1329f6d4a1a419639ed37ee3be6cb0e28819cb7cd668af93ee.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
1220166673_99
ijustrun.xyz:28786
-
auth_value
a93b8d3ce5677c6b78bf7ce4b8556a08
Targets
-
-
Target
JaffaCakes118_bbb88d043d38be1329f6d4a1a419639ed37ee3be6cb0e28819cb7cd668af93ee
-
Size
677.8MB
-
MD5
449274723dd5ecf981189765ccd1591b
-
SHA1
c13de19d75a9929a8fdb7b0a6289aee762ef32cf
-
SHA256
bbb88d043d38be1329f6d4a1a419639ed37ee3be6cb0e28819cb7cd668af93ee
-
SHA512
f04cff591f16a5b147e18304cdcc377dd5d668c4825eadab6ed71b098419908c5498fd7e75ffc1bbb42629464ff768e5058eababdb3ec4dcefff33752e7275c2
-
SSDEEP
6144:rHFIQG//xJO+JcPGeltT0daPXxKfy0NMYE5eQQQH4mfXPb1AOlUOtxs:5IQi/xJO+JcPG24fyQjuHY4/b1fUaxs
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-