Overview

overview

10

Static

static

3

JaffaCakes...99.exe

windows7-x64

10

JaffaCakes...99.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_90a587a7322248ee1034938faf89f099

  • Size

    3.6MB

  • Sample

    250108-hbev6azrfp

  • MD5

    90a587a7322248ee1034938faf89f099

  • SHA1

    a7650331ff718e7fff62dc3a5c4a07802d50d2c4

  • SHA256

    0d22622ff24d48bfcc81b59ba8389299593175dd8665b5a2d7c43bf2c79deb8c

  • SHA512

    1ecee25658d8e3f957f1ccdf207a27ff8d8e9e59684151064e90e4931a638c2227ffe4510b4672adf1f39cd672d6128a8ddfb4fa1e42e2004c56f3d6f737f576

  • SSDEEP

    98304:Xb0iUG90gkj7xlbaKRkS0RhLdhWlDH5nq4S3Wh:XY5Q0g+7TbkSsmDo4aWh

Score
10/10
redlinediscoveryinfostealer

Malware Config

Targets

    • Target

      JaffaCakes118_90a587a7322248ee1034938faf89f099

    • Size

      3.6MB

    • MD5

      90a587a7322248ee1034938faf89f099

    • SHA1

      a7650331ff718e7fff62dc3a5c4a07802d50d2c4

    • SHA256

      0d22622ff24d48bfcc81b59ba8389299593175dd8665b5a2d7c43bf2c79deb8c

    • SHA512

      1ecee25658d8e3f957f1ccdf207a27ff8d8e9e59684151064e90e4931a638c2227ffe4510b4672adf1f39cd672d6128a8ddfb4fa1e42e2004c56f3d6f737f576

    • SSDEEP

      98304:Xb0iUG90gkj7xlbaKRkS0RhLdhWlDH5nq4S3Wh:XY5Q0g+7TbkSsmDo4aWh

    Score
    10/10
    redlinediscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks