General
-
Target
JaffaCakes118_65cc9944fab0c163e4efcee16b9862b162873aa821602ac044dd1cf1114eba9b
-
Size
744.1MB
-
Sample
241230-v1fvzatlcy
-
MD5
149dc599dc1df3c4fdfaa40356932981
-
SHA1
1abd243cc4bb9731cc3e1af063a32f995196934c
-
SHA256
65cc9944fab0c163e4efcee16b9862b162873aa821602ac044dd1cf1114eba9b
-
SHA512
e5cbeaf6a443f7cb4e24833b84ef73ce559e638cccf49e4b14b6c3a7c042ae0e3770a7e4e6a2fb3156be70f7b4e247534d1cc380b762cd2e3033f274bb903d77
-
SSDEEP
3072:O5ag3+uewB3SOwzzHKeyzmUk3BPtSgeFoxT6Wo+tPS9+7MmA6EtLhps5nz0gwAk7:O5aguuewB3H+FtDSgTV09m9+hxe
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_65cc9944fab0c163e4efcee16b9862b162873aa821602ac044dd1cf1114eba9b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_65cc9944fab0c163e4efcee16b9862b162873aa821602ac044dd1cf1114eba9b.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
1420836138_99
dragrun.top:28786
-
auth_value
4aadbeb8eb384fe698f24dde846a0759
Targets
-
-
Target
JaffaCakes118_65cc9944fab0c163e4efcee16b9862b162873aa821602ac044dd1cf1114eba9b
-
Size
744.1MB
-
MD5
149dc599dc1df3c4fdfaa40356932981
-
SHA1
1abd243cc4bb9731cc3e1af063a32f995196934c
-
SHA256
65cc9944fab0c163e4efcee16b9862b162873aa821602ac044dd1cf1114eba9b
-
SHA512
e5cbeaf6a443f7cb4e24833b84ef73ce559e638cccf49e4b14b6c3a7c042ae0e3770a7e4e6a2fb3156be70f7b4e247534d1cc380b762cd2e3033f274bb903d77
-
SSDEEP
3072:O5ag3+uewB3SOwzzHKeyzmUk3BPtSgeFoxT6Wo+tPS9+7MmA6EtLhps5nz0gwAk7:O5aguuewB3H+FtDSgTV09m9+hxe
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-