Extracted

• • Target

    JaffaCakes118_24408c8137e564fcadf907d03059b9ae

  • Size

    2.3MB

  • MD5

    24408c8137e564fcadf907d03059b9ae

  • SHA1

    2f94d3f3f6b0ee2a74c2fc950fd3eec1eb779ba6

  • SHA256

    f7770ac3c808e534e9e780d4a9646563f417ee799a1215149eff400a2fcd7abc

  • SHA512

    67dd363f28653a51d5b0c0e6890b1aa09dc4db414b0a7bfcced7af35bcee7159d2f33c5bbec9d6315bd77be8b2fda61d6e37e461c030adc716060ec5ba692a38

  • SSDEEP

    49152:z5+hFvSlBgZTf8PTHf5Xy2plOqzOmF/pUqa/98faZxiz8lVHTIioOFZQ+R:z5aFvKYTiRt0qNF/pUlCmxiqZ7R

  Score

  10^/10

  redline@addicatedddiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2