Analysis
-
max time kernel
141s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
09-01-2025 19:32
General
-
Target
JaffaCakes118_d08c7505d9deda3037398a2bddec6e49.exe
-
Size
452KB
-
MD5
d08c7505d9deda3037398a2bddec6e49
-
SHA1
c35417022f575351d7b634aaa297d2e456887a7f
-
SHA256
8840d8c54b58cc29c57916919906a81fff6bca7bede7c6d5b08a363359ff3582
-
SHA512
94e88d77a383f657233d3777dcb313cd23f10d4042aa3472c92c0082a706098235f29722e2262a4f3e7ec48cdaa796558d611ba8607340208aa1296162280e9e
-
SSDEEP
12288:TSOyO8hAMF5B+y+576AtAc+YNjip8XjTYWbX:TrvSf+l5LlvjY8XP
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
paladin
C2
193.150.103.37:29118
Attributes
-
auth_value
f27db372188045eefdf974196ead3dae
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 2 IoCs
-
Redline family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_d08c7505d9deda3037398a2bddec6e49.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_d08c7505d9deda3037398a2bddec6e49.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
272KB
-
Filesize
284KB
-
Filesize
4.6MB
-
Filesize
200KB
-
Filesize
192KB
-
Filesize
1024KB
-
Filesize
272KB
-
Filesize
284KB