General
-
Target
JaffaCakes118_7693adaa3901562ffbe312e00a67b5ac
-
Size
4.7MB
-
Sample
250107-yrspysyjdr
-
MD5
7693adaa3901562ffbe312e00a67b5ac
-
SHA1
dc50bbe9c88294e57498af321963d5808e86c9e6
-
SHA256
1221a6e6cb951b0ceaa80c93481ad15bb42581cf622996d137774ca3674d3220
-
SHA512
e4fe2264953c48c323a303cc921ee60bed5471659e4207d382d71147103942066edcd2e3c47b47e3e5563df65e4a04a32ccd43ad514bbf10230738e99150ad2f
-
SSDEEP
98304:LLV/SvvjizRFGfgNKhUqrcHCjNQiI8x1/Bw1qIR/z25Jmri:1/GjRoN+UqkiQiI8//Bw1lR/65Iri
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7693adaa3901562ffbe312e00a67b5ac.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_7693adaa3901562ffbe312e00a67b5ac.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
cool
185.238.169.158:7765
-
auth_value
60ec0c9678621becd603caa1ce0c1314
Targets
-
-
Target
JaffaCakes118_7693adaa3901562ffbe312e00a67b5ac
-
Size
4.7MB
-
MD5
7693adaa3901562ffbe312e00a67b5ac
-
SHA1
dc50bbe9c88294e57498af321963d5808e86c9e6
-
SHA256
1221a6e6cb951b0ceaa80c93481ad15bb42581cf622996d137774ca3674d3220
-
SHA512
e4fe2264953c48c323a303cc921ee60bed5471659e4207d382d71147103942066edcd2e3c47b47e3e5563df65e4a04a32ccd43ad514bbf10230738e99150ad2f
-
SSDEEP
98304:LLV/SvvjizRFGfgNKhUqrcHCjNQiI8x1/Bw1qIR/z25Jmri:1/GjRoN+UqkiQiI8//Bw1lR/65Iri
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-