Overview

overview

10

Static

static

3

JaffaCakes...c8.exe

windows7-x64

10

JaffaCakes...c8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_f97e3aa50db5c748f8655e278c7b14c8

  • Size

    681KB

  • Sample

    250111-g89ala1ngk

  • MD5

    f97e3aa50db5c748f8655e278c7b14c8

  • SHA1

    641889badffa8d6597e8c0c801824671e55067bc

  • SHA256

    5f6018b0d6db39484dc8876c6c61f4b41e5c92aa3d82d5f46035cb7f19a41413

  • SHA512

    dd176f76045d9a6c3ec6d154fc4ba6b824f99a51d9f99545578c67dc631e71dac2d5fbfd1d5ae0b37950fd8122ac130968a7a31971e9be4114580333d867e6c3

  • SSDEEP

    12288:aywRJG16Dxbv3VqWDqdWMFUISH30m2VTdpSityjK:z6Ou73/GWMq3ApdH

Score
10/10
redlinediscoveryinfostealer

Malware Config

Targets

    • Target

      JaffaCakes118_f97e3aa50db5c748f8655e278c7b14c8

    • Size

      681KB

    • MD5

      f97e3aa50db5c748f8655e278c7b14c8

    • SHA1

      641889badffa8d6597e8c0c801824671e55067bc

    • SHA256

      5f6018b0d6db39484dc8876c6c61f4b41e5c92aa3d82d5f46035cb7f19a41413

    • SHA512

      dd176f76045d9a6c3ec6d154fc4ba6b824f99a51d9f99545578c67dc631e71dac2d5fbfd1d5ae0b37950fd8122ac130968a7a31971e9be4114580333d867e6c3

    • SSDEEP

      12288:aywRJG16Dxbv3VqWDqdWMFUISH30m2VTdpSityjK:z6Ou73/GWMq3ApdH

    Score
    10/10
    redlinediscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks