Analysis
-
max time kernel
140s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
01-01-2025 14:55
General
-
Target
JaffaCakes118_596e6ece3310371a1ca113b25fcd6c9a.exe
-
Size
931KB
-
MD5
596e6ece3310371a1ca113b25fcd6c9a
-
SHA1
9fbee4ff6005a304e685fd4a55548ed7448286be
-
SHA256
03badf622a457090ef8ad096344959eec01592b5640054f0cec645fd2e53805a
-
SHA512
e2d247f1e39fe44547f15ee47fd79500287ffcf17bdac851553ef7cd6628b1e71c1d14d43233228293f9deee52ed94f9d2f944903ae43a1f2728eada15003586
-
SSDEEP
24576:bhHYzGRwQh9LuBTTON0C2ae4QxxSHmYYICBFbn6M1FrEM:bhwGLQC2ae4Qxx9YYPFn6SB3
Score
10/10
Malware Config
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 3 IoCs
-
Redline family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_596e6ece3310371a1ca113b25fcd6c9a.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_596e6ece3310371a1ca113b25fcd6c9a.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
308KB
-
Filesize
308KB
-
Filesize
4KB
-
Filesize
248KB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
24KB
-
Filesize
5.6MB
-
Filesize
6.1MB
-
Filesize
1.0MB
-
Filesize
72KB
-
Filesize
584KB
-
Filesize
240KB
-
Filesize
304KB
-
Filesize
4KB
-
Filesize
7.7MB
-
Filesize
952KB