General

  • Target

    JaffaCakes118_172bbc387e453f3b5f9df871aaa0d49bddc8bb9218445db58342ee1741141c85

  • Size

    715.0MB

  • Sample

    241223-3wdttawjgn

  • MD5

    c1f41959bc165b2d2552c5b00396073d

  • SHA1

    51438768ed8a9e0788c22e022841d8b99814d901

  • SHA256

    172bbc387e453f3b5f9df871aaa0d49bddc8bb9218445db58342ee1741141c85

  • SHA512

    88bf4ff35b34d9c0333f490f1a6035ab7a8be0eb3c08266946c9cfbe52fc9a788de055921177a95be149fb2b8d280fd8d0254476b8518b84316bc51a7a4934c7

  • SSDEEP

    24576:MptWrkUP/1F51MfojHpez56/ODIi7kR60DckhX:K3UH7DKAIbki7y9hX

Malware Config

Extracted

Family

redline

Botnet

CRYPT BY META

C2

89.107.10.226:37141

Attributes
  • auth_value

    31efbabdcfc797323e09a896b4808afe

Targets

    • Target

      JaffaCakes118_172bbc387e453f3b5f9df871aaa0d49bddc8bb9218445db58342ee1741141c85

    • Size

      715.0MB

    • MD5

      c1f41959bc165b2d2552c5b00396073d

    • SHA1

      51438768ed8a9e0788c22e022841d8b99814d901

    • SHA256

      172bbc387e453f3b5f9df871aaa0d49bddc8bb9218445db58342ee1741141c85

    • SHA512

      88bf4ff35b34d9c0333f490f1a6035ab7a8be0eb3c08266946c9cfbe52fc9a788de055921177a95be149fb2b8d280fd8d0254476b8518b84316bc51a7a4934c7

    • SSDEEP

      24576:MptWrkUP/1F51MfojHpez56/ODIi7kR60DckhX:K3UH7DKAIbki7y9hX

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks