General
-
Target
JaffaCakes118_be2cd6ed7c99fdc5a75fccad1a636d44247ae037fc903edde798448205717db8
-
Size
749.6MB
-
Sample
241230-2s8dksvpgx
-
MD5
ff6c894fc40939b4e0613e31b121e8e6
-
SHA1
c18d00afe2b26c029eb65f4e321316fa1ebf971d
-
SHA256
be2cd6ed7c99fdc5a75fccad1a636d44247ae037fc903edde798448205717db8
-
SHA512
8cfacb43b13cff5166d9ec85a8c4adfd587168026bcb817c16ee09be5b16eb5691eddb4ba98acd0b2b05d6cc64f023ccbcd692b3ed48d11d5304051b5c9eddad
-
SSDEEP
3072:FMzb7MjXlEHFM+3Ozv7fet7nncGeynu+zLR+p5Kj/8mtghSbPnUQ5/WoG9e1PYdS:yzcDlEHF5gvqRpuSLLASxlW79e1Zb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_be2cd6ed7c99fdc5a75fccad1a636d44247ae037fc903edde798448205717db8.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_be2cd6ed7c99fdc5a75fccad1a636d44247ae037fc903edde798448205717db8.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
5109461904_99
dragrun.top:28786
-
auth_value
5e48ff991035f33bd42dee4f3e8296c0
Targets
-
-
Target
JaffaCakes118_be2cd6ed7c99fdc5a75fccad1a636d44247ae037fc903edde798448205717db8
-
Size
749.6MB
-
MD5
ff6c894fc40939b4e0613e31b121e8e6
-
SHA1
c18d00afe2b26c029eb65f4e321316fa1ebf971d
-
SHA256
be2cd6ed7c99fdc5a75fccad1a636d44247ae037fc903edde798448205717db8
-
SHA512
8cfacb43b13cff5166d9ec85a8c4adfd587168026bcb817c16ee09be5b16eb5691eddb4ba98acd0b2b05d6cc64f023ccbcd692b3ed48d11d5304051b5c9eddad
-
SSDEEP
3072:FMzb7MjXlEHFM+3Ozv7fet7nncGeynu+zLR+p5Kj/8mtghSbPnUQ5/WoG9e1PYdS:yzcDlEHF5gvqRpuSLLASxlW79e1Zb
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-