Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
10-01-2025 00:14
General
-
Target
JaffaCakes118_d5f3aecb96449709be7530546937d352.exe
-
Size
446KB
-
MD5
d5f3aecb96449709be7530546937d352
-
SHA1
12482a0c205ce86a92d68994e4bc316f2c2e0ea8
-
SHA256
c6699e9a4c4e7ccf75258c7e33f37271af720d3ff7849c92c6e402bb2d6de0d4
-
SHA512
5b1421ba4c4fabd23c0b6c5652ec84ec0ebcba1f0bd525f01f96482fdb21fa2c5417c49bae4e642d0e93b36c4812801492795dec4eb14a7fd473cfc170aee48e
-
SSDEEP
12288:bTMhbS+r1YNbo9ERNVezf0tl2bfZwaLyxaE:HMh++rK3NVz6N7E
Score
10/10
Malware Config
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 2 IoCs
-
Redline family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_d5f3aecb96449709be7530546937d352.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_d5f3aecb96449709be7530546937d352.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
268KB
-
Filesize
18.9MB
-
Filesize
18.9MB
-
Filesize
280KB
-
Filesize
272KB
-
Filesize
18.9MB
-
Filesize
268KB