General
-
Target
JaffaCakes118_9d5db4dc5528fb0fb1535ecab6bb244f
-
Size
517KB
-
Sample
250108-nqv4kszrhl
-
MD5
9d5db4dc5528fb0fb1535ecab6bb244f
-
SHA1
76ea11cb9b0d437b15dfbb07c7bb5cfacf6c9599
-
SHA256
33657f7b8278b9c5ad57762a143c057db1ac285702ef6ca250f9ef7c6bda9231
-
SHA512
aa036ae2f346a0d63bb6b904b0c2a61cf78e4e0a17e43f927de7546011e2078875acff8253405606aee957de87b63b41155da5cf7d4782f0eaa3c460c8745a68
-
SSDEEP
3072:7x/C4661LUFALMcnj4lOl7Mhv+lVgeme3GfPf9Hp78rqjMVIB0CUp27:7xzw6VneB+lVgemeYRZYXmBfUpK
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_9d5db4dc5528fb0fb1535ecab6bb244f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_9d5db4dc5528fb0fb1535ecab6bb244f.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
141.94.188.138:46419
-
auth_value
3f48b95855158031ae9e7dafcb203009
Targets
-
-
Target
JaffaCakes118_9d5db4dc5528fb0fb1535ecab6bb244f
-
Size
517KB
-
MD5
9d5db4dc5528fb0fb1535ecab6bb244f
-
SHA1
76ea11cb9b0d437b15dfbb07c7bb5cfacf6c9599
-
SHA256
33657f7b8278b9c5ad57762a143c057db1ac285702ef6ca250f9ef7c6bda9231
-
SHA512
aa036ae2f346a0d63bb6b904b0c2a61cf78e4e0a17e43f927de7546011e2078875acff8253405606aee957de87b63b41155da5cf7d4782f0eaa3c460c8745a68
-
SSDEEP
3072:7x/C4661LUFALMcnj4lOl7Mhv+lVgeme3GfPf9Hp78rqjMVIB0CUp27:7xzw6VneB+lVgemeYRZYXmBfUpK
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-