General
-
Target
JaffaCakes118_4be3a9e0248729cefa09a9b2b9601bf6
-
Size
4.6MB
-
Sample
250107-eekn2avmfp
-
MD5
4be3a9e0248729cefa09a9b2b9601bf6
-
SHA1
f8132d7a8471c234407bd690219289d695d4be2d
-
SHA256
656e7fd45410adb4e4529e8fc8ce02a22a87a7d492573562e4eb557e6f2abe0a
-
SHA512
b17db0ba2d80305d72562af1bf3a71c0be80670d7bc9e45fcae700020431bf2ebdddb9cc0355d568b735bcce52bb0f90a86a2b47059f487f6f928d5662bf0245
-
SSDEEP
98304:3Lmwt3iDDTsfBbMNYn1Ody2FSgW9Yh1qiVhfLx/AcVC+OPbjp1tOYk8Bm2GRdZrE:oTKBMNOOclYhYib7VC+gb5k8Bf81
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_4be3a9e0248729cefa09a9b2b9601bf6.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_4be3a9e0248729cefa09a9b2b9601bf6.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
@e0neee
185.209.22.181:29234
-
auth_value
5a0918bd3e8ede8e02c8dd9d106a996d
Targets
-
-
Target
JaffaCakes118_4be3a9e0248729cefa09a9b2b9601bf6
-
Size
4.6MB
-
MD5
4be3a9e0248729cefa09a9b2b9601bf6
-
SHA1
f8132d7a8471c234407bd690219289d695d4be2d
-
SHA256
656e7fd45410adb4e4529e8fc8ce02a22a87a7d492573562e4eb557e6f2abe0a
-
SHA512
b17db0ba2d80305d72562af1bf3a71c0be80670d7bc9e45fcae700020431bf2ebdddb9cc0355d568b735bcce52bb0f90a86a2b47059f487f6f928d5662bf0245
-
SSDEEP
98304:3Lmwt3iDDTsfBbMNYn1Ody2FSgW9Yh1qiVhfLx/AcVC+OPbjp1tOYk8Bm2GRdZrE:oTKBMNOOclYhYib7VC+gb5k8Bf81
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-