General
-
Target
JaffaCakes118_9e97bc3f960c74093263b348885657b6
-
Size
485KB
-
Sample
250108-pbzznayqhw
-
MD5
9e97bc3f960c74093263b348885657b6
-
SHA1
0922c67fea3702326a184d5b3a0d314fb9578aae
-
SHA256
ce3523e1b3a42f4ecdd3902746c19e3f7089a2dec61d9f016f6180e1ec414669
-
SHA512
852cf6073bd0356a67dd7c6df459590ac3bde14e56238bf36053433548799f7c9faf33f96101ce43fb23f05d3f39e8353f10b68999cb0987bcf851f50ecff811
-
SSDEEP
3072:19PBOP6YFctlR06KJfiJymm69YQq+ve3fRmc+qIxO82Fk+7cG/Wa2EtV:19PBOSYFnffoyxp+v+fZu6
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_9e97bc3f960c74093263b348885657b6.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_9e97bc3f960c74093263b348885657b6.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
65.108.29.210:21638
-
auth_value
ad39d6a8ea7823f2a92f57ebaa4c98a5
Targets
-
-
Target
JaffaCakes118_9e97bc3f960c74093263b348885657b6
-
Size
485KB
-
MD5
9e97bc3f960c74093263b348885657b6
-
SHA1
0922c67fea3702326a184d5b3a0d314fb9578aae
-
SHA256
ce3523e1b3a42f4ecdd3902746c19e3f7089a2dec61d9f016f6180e1ec414669
-
SHA512
852cf6073bd0356a67dd7c6df459590ac3bde14e56238bf36053433548799f7c9faf33f96101ce43fb23f05d3f39e8353f10b68999cb0987bcf851f50ecff811
-
SSDEEP
3072:19PBOP6YFctlR06KJfiJymm69YQq+ve3fRmc+qIxO82Fk+7cG/Wa2EtV:19PBOSYFnffoyxp+v+fZu6
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-