General
-
Target
JaffaCakes118_69f62b5de4919783262b45158ecb86ea
-
Size
183KB
-
Sample
250107-sjlnsawmf1
-
MD5
69f62b5de4919783262b45158ecb86ea
-
SHA1
c366f0500a28f504e348ab37fa43dafe189d9ab9
-
SHA256
70c97eee62e950ad16cf1ab32abd589edca0f9179d611a4f01c76d9498816fa1
-
SHA512
be29ba27ef3c60be2403fdf4b16ddec5cae04f64048f41126595adf42bfaef2e78d3cdf09bbc9016c0a171bf3bfaaf4393c1adb3754b44378661b39d37c28a57
-
SSDEEP
3072:EuqhsgGmVhPDDoi+WWV4YliqHzyH/A+LQXFGzP+4Dtf4mEQ20VIJ:mhPGmVVDoi+WWdiqHzyfA+uFYGdmj8
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_69f62b5de4919783262b45158ecb86ea.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_69f62b5de4919783262b45158ecb86ea.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
185.215.113.51:56632
-
auth_value
8a057b047bb60399b5cc0fa800e50e51
Targets
-
-
Target
JaffaCakes118_69f62b5de4919783262b45158ecb86ea
-
Size
183KB
-
MD5
69f62b5de4919783262b45158ecb86ea
-
SHA1
c366f0500a28f504e348ab37fa43dafe189d9ab9
-
SHA256
70c97eee62e950ad16cf1ab32abd589edca0f9179d611a4f01c76d9498816fa1
-
SHA512
be29ba27ef3c60be2403fdf4b16ddec5cae04f64048f41126595adf42bfaef2e78d3cdf09bbc9016c0a171bf3bfaaf4393c1adb3754b44378661b39d37c28a57
-
SSDEEP
3072:EuqhsgGmVhPDDoi+WWV4YliqHzyH/A+LQXFGzP+4Dtf4mEQ20VIJ:mhPGmVVDoi+WWdiqHzyfA+uFYGdmj8
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-