Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
07-01-2025 07:41
General
-
Target
JaffaCakes118_56183ad978d92d8de779b7d0cb7fc707.exe
-
Size
6.5MB
-
MD5
56183ad978d92d8de779b7d0cb7fc707
-
SHA1
5e426e6f0cfeac6dca6afc37fea4fc47b42be640
-
SHA256
aeba5b7d50fc0f75b45edb4bffc99f081776ace2475e01cb799d4ca02e0f21c9
-
SHA512
eec2c7e28acf6333b4359b2107412f9f65bcbb5f7aca42128f2891429c91134e1e950f91c8873462f50b108455cde99df8d3267c707ce3f7a5f162dc9863977b
-
SSDEEP
196608:wuKwkE2DwjoabPEfRkJynweHB90iPgkusVcEvId:wirjoa4nwC90E3vId
Malware Config
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 29 IoCs
-
Redline family
-
VMProtect packed file 2 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_56183ad978d92d8de779b7d0cb7fc707.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_56183ad978d92d8de779b7d0cb7fc707.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.5MB
-
Filesize
4KB
-
Filesize
10.1MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
10.1MB
-
Filesize
288KB
-
Filesize
5.6MB
-
Filesize
288KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
72KB
-
Filesize
6.1MB
-
Filesize
240KB
-
Filesize
304KB
-
Filesize
1.0MB
-
Filesize
3.5MB