Extracted

• • Target

    JaffaCakes118_72919bf5ac55f584c67da2004287e124

  • Size

    2.3MB

  • MD5

    72919bf5ac55f584c67da2004287e124

  • SHA1

    97d545f94fbac0bb6458ec0a1dcedcf969f7cf93

  • SHA256

    b275923761c65cf5ed348b36508d1369d59f1fe4cd471acbd995b7c16df27cb9

  • SHA512

    cdc82826777156b258d8642375088e7fe46b807ba59793b082129cded2f0f76427f64de74421db82c9ebac1568a692dd361176f5c5bca65f1d1af0d2b4f16c5d

  • SSDEEP

    49152:H5+hFHxq1JcJ05gwY7xnXst4sQWKh+BH8gjlPh4Tcaxiz8lVHTIioOFZQ+v:H5aFRqxl6hyHHa+BH1jngcaxiqZ7v

  Score

  10^/10

  redline@normhhddiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2