Extracted

• • Target

    JaffaCakes118_50e1a9dfd735a8a2dcd03a5d8ba11559bea36872

  • Size

    664.0MB

  • MD5

    56a9cc556873746b9aa24690021cc630

  • SHA1

    50e1a9dfd735a8a2dcd03a5d8ba11559bea36872

  • SHA256

    a66eb9a28cee5f79ab9233ba536c4e48b2323b3f0b2904f9565c8a83e4d313fe

  • SHA512

    53f3f9546bdea23825f903743137754c01f3aa37a91d14c7da23200ff58e04f9895492ff1da97e870f55484f1c498c5844fca7b2e85922256ce5a6489eff37e0

  • SSDEEP

    3072:QRcEDUghRlg0eeG7XLTWz5M/eKhSxRRa4ukJu8B0hVm4gMJGIVPDeCkyRNo5:K4Co0MrLTMM/XF4psnbHJXeCkuNC

  Score

  10^/10

  redline2037366459_99discoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2