General

  • Target

    JaffaCakes118_445990599534816991c6ccf1781763f855e1beff0f2d7f9305a95938edfafbcf

  • Size

    690.4MB

  • Sample

    241221-xlc7mswpay

  • MD5

    95b35f12fb70251d52cc693e147133c0

  • SHA1

    1f8c5cc37c24f6ccec159de07edf3fc64104d66b

  • SHA256

    445990599534816991c6ccf1781763f855e1beff0f2d7f9305a95938edfafbcf

  • SHA512

    a4dfd8e2b3a513425c427f0b131b139e6ff7a69eabd2b2edfbea63a3ceafe54d06163a395e160b64c1e3a2406439637c8addd57e154b7b8050daf940afea0d40

  • SSDEEP

    49152:WmVlA7GqB6/KWpXeJpyYmJdIiDix/TYLAbJMZnMw2tNn1Or/GtXEJ+GRgD6Vk3j8:18Na5XeJQpU/sLAKnMwoyXsm

Malware Config

Extracted

Family

redline

Botnet

Meta

C2

109.205.214.6:81

Attributes
  • auth_value

    ff920b9b3b34fa545260b11f0ece519d

Targets

    • Target

      JaffaCakes118_445990599534816991c6ccf1781763f855e1beff0f2d7f9305a95938edfafbcf

    • Size

      690.4MB

    • MD5

      95b35f12fb70251d52cc693e147133c0

    • SHA1

      1f8c5cc37c24f6ccec159de07edf3fc64104d66b

    • SHA256

      445990599534816991c6ccf1781763f855e1beff0f2d7f9305a95938edfafbcf

    • SHA512

      a4dfd8e2b3a513425c427f0b131b139e6ff7a69eabd2b2edfbea63a3ceafe54d06163a395e160b64c1e3a2406439637c8addd57e154b7b8050daf940afea0d40

    • SSDEEP

      49152:WmVlA7GqB6/KWpXeJpyYmJdIiDix/TYLAbJMZnMw2tNn1Or/GtXEJ+GRgD6Vk3j8:18Na5XeJQpU/sLAKnMwoyXsm

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks