Extracted

• • Target

    JaffaCakes118_468dce1923e1e152a50b9a5e5b0f8646

  • Size

    4.6MB

  • MD5

    468dce1923e1e152a50b9a5e5b0f8646

  • SHA1

    a946dd7487cbd67dbd4b7e4e6b975e96642da444

  • SHA256

    541f19150360d3a895b6f98fbbd7a03c0571735fd85b8fe6b86d35f0854a6be9

  • SHA512

    84d2b0e9c6bbfcf23127962a7986334150b4dc95fd95f3afbce458c442855a6e170680044a5eaa1681e5b7435f0b25bf75d257ad1013410b873ea801fdd20612

  • SSDEEP

    98304:8L/qUz9F8rMvMhfFH6lNSji7mlO5lhEH1fdJvmLwSPc7e++Lkwv/DL4T3U:rcv8jilN0Ym0liFJvmdkS34wv/gA

  Score

  10^/10

  redline@bo0tleggerdiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Suspicious use of SetThreadContext

  behavioral1behavioral2