General
- Target jaffacakes118_4cc065ceffd686fab78ac7a44ba56f793a6b03170763e50d2a24a750d0f60b93
- Size 349KB
- Sample261016-j6md6agf48
- SHA256 4cc065ceffd686fab78ac7a44ba56f793a6b03170763e50d2a24a750d0f60b93
- MD5 567982f5c7be86387435016e3984862f
- SHA1 e9b0977f0583750ccc708c9b35f7c9d7e45f5f4f
- SHA512 240b311cd63a789ce16b0bdcc834cde13add6a13d5ab36fa030171de303341b291a105b1d2ddb0b361cc0d59906042f9e54bcc70733882e16895516382c19089
- SSDEEP 6144:LQd66y30oCVRphul+XTetAOenVRqgfW6JPmCDW3YDzugieHQbLLKW1:LBJ30oCVRQ+VRqgfWIeCDz9iewbLT1
- TLSH T1D374AE10F592C833D4A1193208E4DEF58B2DB5217FA19AFB97A44AFE3E305D186B18F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_4cc065ceffd686fab78ac7a44ba56f793a6b03170763e50d2a24a750d0f60b93.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_4cc065ceffd686fab78ac7a44ba56f793a6b03170763e50d2a24a750d0f60b93.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
C2
-
79.137.192.7:39946
Attributes
-
auth_value
3c6a87acbf167290f22d8730a587b586
Targets
-
- Target jaffacakes118_4cc065ceffd686fab78ac7a44ba56f793a6b03170763e50d2a24a750d0f60b93
- Size 349KB
- SHA256 4cc065ceffd686fab78ac7a44ba56f793a6b03170763e50d2a24a750d0f60b93
- MD5 567982f5c7be86387435016e3984862f
- SHA1 e9b0977f0583750ccc708c9b35f7c9d7e45f5f4f
- SHA512 240b311cd63a789ce16b0bdcc834cde13add6a13d5ab36fa030171de303341b291a105b1d2ddb0b361cc0d59906042f9e54bcc70733882e16895516382c19089
- SSDEEP 6144:LQd66y30oCVRphul+XTetAOenVRqgfW6JPmCDW3YDzugieHQbLLKW1:LBJ30oCVRQ+VRqgfWIeCDz9iewbLT1
- TLSH T1D374AE10F592C833D4A1193208E4DEF58B2DB5217FA19AFB97A44AFE3E305D186B18F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Suspicious use of SetThreadContext