General
-
Target
JaffaCakes118_aca609b2e9b1c4e30dc344513ef69205
-
Size
4.7MB
-
Sample
250108-zyzyaatlbx
-
MD5
aca609b2e9b1c4e30dc344513ef69205
-
SHA1
2e08bc9f89d918219d92345e9a185cb4a78a336a
-
SHA256
1b6ce7eccccf7393e6e32425a7f8c96c7800407e13f9863e3ee85b91ec2cf17e
-
SHA512
44feed423da8dd6856e5c92b8f2c63507cb164f2f284f01fce701c6b7f003b06d97b36a0bca7936925d59eba2239e6a38ce16f5e25008755fc2b25c443d93ef3
-
SSDEEP
98304:TLA+P9slZPUA/TbTmZn5Pwo4u2HR/AWYe/D4atjE+X/Tzhp6qbWaXJbQ:t9slBUA/TbTmZn5P8LhYW1dXvhp6cxX+
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_aca609b2e9b1c4e30dc344513ef69205.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_aca609b2e9b1c4e30dc344513ef69205.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
JaffaCakes118_aca609b2e9b1c4e30dc344513ef69205
-
Size
4.7MB
-
MD5
aca609b2e9b1c4e30dc344513ef69205
-
SHA1
2e08bc9f89d918219d92345e9a185cb4a78a336a
-
SHA256
1b6ce7eccccf7393e6e32425a7f8c96c7800407e13f9863e3ee85b91ec2cf17e
-
SHA512
44feed423da8dd6856e5c92b8f2c63507cb164f2f284f01fce701c6b7f003b06d97b36a0bca7936925d59eba2239e6a38ce16f5e25008755fc2b25c443d93ef3
-
SSDEEP
98304:TLA+P9slZPUA/TbTmZn5Pwo4u2HR/AWYe/D4atjE+X/Tzhp6qbWaXJbQ:t9slBUA/TbTmZn5P8LhYW1dXvhp6cxX+
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-