General
-
Target
JaffaCakes118_2277bc489776977bfa7d6a63b776cdb2
-
Size
4.6MB
-
Sample
250106-n6sndsyjgj
-
MD5
2277bc489776977bfa7d6a63b776cdb2
-
SHA1
8371297e5463b68759089db830324e0d2884b5dc
-
SHA256
0da3ef7a2d856343fc25d00296f6de95c56c62c0966e9a4b9cc4b043e3d4db9a
-
SHA512
961fe7d0dff4a61638bab905df19640c8faae915980dccdee7956d5f8100a183269654e96394daf6af05f40cc082f953e1cf8f780d2a98bf9d8f46c468861ed5
-
SSDEEP
98304:zLwiAM0fvDFoF3QsvwOQoWq1bksQD9Av9sAwky+So5sY3wdmyH:b0Mg/ObW+bksQBW92ky+S0sY3em
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_2277bc489776977bfa7d6a63b776cdb2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_2277bc489776977bfa7d6a63b776cdb2.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
@Temshik159
185.209.22.181:29234
-
auth_value
5a0918bd3e8ede8e02c8dd9d106a996d
Targets
-
-
Target
JaffaCakes118_2277bc489776977bfa7d6a63b776cdb2
-
Size
4.6MB
-
MD5
2277bc489776977bfa7d6a63b776cdb2
-
SHA1
8371297e5463b68759089db830324e0d2884b5dc
-
SHA256
0da3ef7a2d856343fc25d00296f6de95c56c62c0966e9a4b9cc4b043e3d4db9a
-
SHA512
961fe7d0dff4a61638bab905df19640c8faae915980dccdee7956d5f8100a183269654e96394daf6af05f40cc082f953e1cf8f780d2a98bf9d8f46c468861ed5
-
SSDEEP
98304:zLwiAM0fvDFoF3QsvwOQoWq1bksQD9Av9sAwky+So5sY3wdmyH:b0Mg/ObW+bksQBW92ky+S0sY3em
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-