Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
07-01-2025 23:56
General
-
Target
JaffaCakes118_7fee2c6c7740d69a8b21b3367875ddae.exe
-
Size
449KB
-
MD5
7fee2c6c7740d69a8b21b3367875ddae
-
SHA1
7c5d5cbaccb42e3c64477ce012fd87516399e4f1
-
SHA256
c04409a335eb9fc80eee6752cc8e39a3f5721b0490228064bf64ec7452c592fb
-
SHA512
c5e94d5dedc75edb43eb5d816589dd5f14c14cc9f20d29cb3d043598e8bf5c9a39d0cb43bf1b9fb8d0c46da89f2b6187a8e70ea3f924f3f631852ef4779747f1
-
SSDEEP
6144:U7UWfxA6dZXTzBzR18ig9a23Exn5DxNnWd/XI4qXJNJhJWle8F48EczhftfjZ/:MJfL3xvc9YjDcenhJWlef8EcNX/
Score
10/10
Malware Config
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 2 IoCs
-
Redline family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7fee2c6c7740d69a8b21b3367875ddae.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7fee2c6c7740d69a8b21b3367875ddae.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
332KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
18.9MB
-
Filesize
336KB
-
Filesize
1024KB
-
Filesize
18.9MB
-
Filesize
332KB
-
Filesize
344KB