General
-
Target
JaffaCakes118_11820dd99886c43259615084cb25d5cb
-
Size
517KB
-
Sample
250106-gb57nsxngy
-
MD5
11820dd99886c43259615084cb25d5cb
-
SHA1
ba7740487a3bb2f8bd3782a485664459da836cda
-
SHA256
dae95b7f7a65f6dd5c46a91861163a872ef10d1f217a6315093c77cca3cf6212
-
SHA512
5bf1d7f43ac4d97ac1a577c57c87655d025b98b55c1a349321d0acbb9cc5a910dea4775b9cf19d83fd87000d44aab8ce2c7e457ea8010c55b69a79e5b6682f4a
-
SSDEEP
3072:23KpVhyjKlSMnuhqNu/LPmb1PE+wag8VoA0gJLAd7rK/73UaYnMdd/glaNMMVK39:pVhyj92u/Lub1Av8qFgJuKDgUNMeK39
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_11820dd99886c43259615084cb25d5cb.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_11820dd99886c43259615084cb25d5cb.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
141.94.188.138:46419
-
auth_value
3f48b95855158031ae9e7dafcb203009
Targets
-
-
Target
JaffaCakes118_11820dd99886c43259615084cb25d5cb
-
Size
517KB
-
MD5
11820dd99886c43259615084cb25d5cb
-
SHA1
ba7740487a3bb2f8bd3782a485664459da836cda
-
SHA256
dae95b7f7a65f6dd5c46a91861163a872ef10d1f217a6315093c77cca3cf6212
-
SHA512
5bf1d7f43ac4d97ac1a577c57c87655d025b98b55c1a349321d0acbb9cc5a910dea4775b9cf19d83fd87000d44aab8ce2c7e457ea8010c55b69a79e5b6682f4a
-
SSDEEP
3072:23KpVhyjKlSMnuhqNu/LPmb1PE+wag8VoA0gJLAd7rK/73UaYnMdd/glaNMMVK39:pVhyj92u/Lub1Av8qFgJuKDgUNMeK39
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-