General
-
Target
JaffaCakes118_85ce29b3b3d67043df315e6cf07f5171
-
Size
389KB
-
Sample
250108-crcsvazlfv
-
MD5
85ce29b3b3d67043df315e6cf07f5171
-
SHA1
e1ee8f8d69895afb2998ae38ea2e6de83e223bd2
-
SHA256
7b049ebf3273cb47aaca7d9b340d44e0161008ab3613abf033b25fe1ef29173d
-
SHA512
ca62c3516e241747eb9affe5123ec8875d686fd6267db5e77715d7c0c45c0eec75e468f00de5df90b8e4a5cabf2cc3c73de1d9d7f224c0e2d7a604f536aed744
-
SSDEEP
12288:FUQlVRJpCBG505xdS3u5AnQBOjAPOcMcdDE3W8n:FJhJbU
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_85ce29b3b3d67043df315e6cf07f5171.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_85ce29b3b3d67043df315e6cf07f5171.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
TechnoGamerzModMenuInstallerV2.12
185.215.113.55:36801
-
auth_value
5c57f1eb36bb351b7007ba406bba7afc
Targets
-
-
Target
JaffaCakes118_85ce29b3b3d67043df315e6cf07f5171
-
Size
389KB
-
MD5
85ce29b3b3d67043df315e6cf07f5171
-
SHA1
e1ee8f8d69895afb2998ae38ea2e6de83e223bd2
-
SHA256
7b049ebf3273cb47aaca7d9b340d44e0161008ab3613abf033b25fe1ef29173d
-
SHA512
ca62c3516e241747eb9affe5123ec8875d686fd6267db5e77715d7c0c45c0eec75e468f00de5df90b8e4a5cabf2cc3c73de1d9d7f224c0e2d7a604f536aed744
-
SSDEEP
12288:FUQlVRJpCBG505xdS3u5AnQBOjAPOcMcdDE3W8n:FJhJbU
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-