Overview

overview

10

Static

static

1

JaffaCakes...9c.exe

windows7-x64

10

JaffaCakes...9c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_1ce49705d8970f5eb961f86feb30529c

  • Size

    487KB

  • Sample

    250106-lw9statlht

  • MD5

    1ce49705d8970f5eb961f86feb30529c

  • SHA1

    f83e0f9a4f9548305460349cd32ece0897ec2dcb

  • SHA256

    43e6afa2b5afd7c1f447a4c3ea13ae0de23bfe09b63c753251b653692cbd4b10

  • SHA512

    56914406f52ec41270036389763f1bdb7025a330a0f1c91bbebc114992a51437d7cbc512e53227c0f1c81606a70a3c263eec9bc345df9a04da8052c3e93a0f4e

  • SSDEEP

    12288:Ihxp3lZnT9bD4h3d1yBGIxUyxy4H9KIUfNTq:IJlh9bD4hryBG+GNu

Score
10/10
redlinediscoveryinfostealer

Malware Config

Targets

    • Target

      JaffaCakes118_1ce49705d8970f5eb961f86feb30529c

    • Size

      487KB

    • MD5

      1ce49705d8970f5eb961f86feb30529c

    • SHA1

      f83e0f9a4f9548305460349cd32ece0897ec2dcb

    • SHA256

      43e6afa2b5afd7c1f447a4c3ea13ae0de23bfe09b63c753251b653692cbd4b10

    • SHA512

      56914406f52ec41270036389763f1bdb7025a330a0f1c91bbebc114992a51437d7cbc512e53227c0f1c81606a70a3c263eec9bc345df9a04da8052c3e93a0f4e

    • SSDEEP

      12288:Ihxp3lZnT9bD4h3d1yBGIxUyxy4H9KIUfNTq:IJlh9bD4hryBG+GNu

    Score
    10/10
    redlinediscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks