General

  • Target
    jaffacakes118_Installer.exe
  • Size 1.6MB
  • Sample261006-jdk1mavvc1
  • SHA256 44eadb00922d7165b4a392e0c7b84cbc0cd79e2a9e0d0fabab80a8482ea45c81
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Installer.exe
    • Size 1.6MB
    • SHA256 44eadb00922d7165b4a392e0c7b84cbc0cd79e2a9e0d0fabab80a8482ea45c81
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects DonutLoader

    • Family: DonutLoader

      DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.

    • Family: RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • ConfuserEx .NET packer

      Detects ConfuserEx .NET packer.

MITRE ATT&CK Enterprise v16

Tasks