Extracted

• • Target
    jaffacakes118_60eb66972616edf6a8608ca75e74a62215d08a58e744ee195590fc3d4dfc7ec4
  • Size 742KB
  • SHA256 60eb66972616edf6a8608ca75e74a62215d08a58e744ee195590fc3d4dfc7ec4
  • MD5 1beeba093e380a254e74aa73559dd9f4
  • SHA1 0dee6a48f206b76171f0024edff27238d82bb202
  • SHA512 bef68ed68c9bf5e45a4a534960dcb403fb17ffc73e14495962773a5ba286706da2331a40198f76fcac10677db711827b52bc9af54016a58eb3e2e92153a5ca6c
  • SSDEEP 12288:b+Zw3JNs7ZNpku3JOCRHbE49kIcxVENHlcG/CmtxntyXfU9w6eTVvYAZT6+fb1B:b+wNWNpfHRHbBkIcxVEIG3GMu6eTVvYy
  • TLSH
    T1BFF49D3236C1C03BC2771136499987BEA6BBF6715D35890BBBC9036D2F74693DE21286
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  @lolzhedgehoddiscoverydonutloaderredlineinfostealerloader

  • Detects DonutLoader

    loader

  • Family: DonutLoader

    DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.

    loaderdonutloader

  • Family: RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  behavioral1behavioral2