General

  • Target

    JaffaCakes118_ec3512fc063a74841596f618a71852bfe5da21fc57f50be5dd780fc96c5d0ff9

  • Size

    712.4MB

  • Sample

    241223-wpp5yawrdm

  • MD5

    56ec6179db9c059b63a0abdd5ff22a49

  • SHA1

    24938e93c84e5840c7dace77627ec67db3b35838

  • SHA256

    ec3512fc063a74841596f618a71852bfe5da21fc57f50be5dd780fc96c5d0ff9

  • SHA512

    890331ac30ed3a2260b4e30e5ac052f05a0f90376681b8410bd09fd460772913415dcc64c836be36518be811f5930032c9fd25505708890d00e84762c501d37a

  • SSDEEP

    98304:3zR5P6nqVcP1tx62IdoypBr1fvFalXHneoj3n3e4zud/3C6zu2c0Tsszd0bTFwJ:vPBVMx6OypBrtUdrp6DeCd8TFwJ

Malware Config

Extracted

Family

redline

Botnet

CP

C2

77.73.134.13:3660

Attributes
  • auth_value

    854db91253aeecee59aba4b00f8c09bc

Targets

    • Target

      JaffaCakes118_ec3512fc063a74841596f618a71852bfe5da21fc57f50be5dd780fc96c5d0ff9

    • Size

      712.4MB

    • MD5

      56ec6179db9c059b63a0abdd5ff22a49

    • SHA1

      24938e93c84e5840c7dace77627ec67db3b35838

    • SHA256

      ec3512fc063a74841596f618a71852bfe5da21fc57f50be5dd780fc96c5d0ff9

    • SHA512

      890331ac30ed3a2260b4e30e5ac052f05a0f90376681b8410bd09fd460772913415dcc64c836be36518be811f5930032c9fd25505708890d00e84762c501d37a

    • SSDEEP

      98304:3zR5P6nqVcP1tx62IdoypBr1fvFalXHneoj3n3e4zud/3C6zu2c0Tsszd0bTFwJ:vPBVMx6OypBrtUdrp6DeCd8TFwJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks