General

  • Target

    JaffaCakes118_4591dd6a6df85da645b578bc6dd09bb95c3dcca07e90d621823a5d685335ec33

  • Size

    747.6MB

  • Sample

    241225-1dackaykcv

  • MD5

    bd2ab593a87f38d97eeba128004922cd

  • SHA1

    4c4d27287989d2c3ad33360ebe0c716fbd28335a

  • SHA256

    4591dd6a6df85da645b578bc6dd09bb95c3dcca07e90d621823a5d685335ec33

  • SHA512

    231fc7e569dbc350493a05c41b229517dbe1bf36b9b81143ce20dee16b4a9bdf01dde87f75bcc7e316c12e668b9803b255a0e3afebf74a5a87912697f17354fa

  • SSDEEP

    6144:WzjZ0wW+53t2QWJiyDN5uwER5yT330bqSRqnvRfWbR8m6:K0+53eJiyDNcSsRQ

Malware Config

Extracted

Family

redline

Botnet

1420836138_99

C2

dragrun.top:28786

Attributes
  • auth_value

    4aadbeb8eb384fe698f24dde846a0759

Targets

    • Target

      JaffaCakes118_4591dd6a6df85da645b578bc6dd09bb95c3dcca07e90d621823a5d685335ec33

    • Size

      747.6MB

    • MD5

      bd2ab593a87f38d97eeba128004922cd

    • SHA1

      4c4d27287989d2c3ad33360ebe0c716fbd28335a

    • SHA256

      4591dd6a6df85da645b578bc6dd09bb95c3dcca07e90d621823a5d685335ec33

    • SHA512

      231fc7e569dbc350493a05c41b229517dbe1bf36b9b81143ce20dee16b4a9bdf01dde87f75bcc7e316c12e668b9803b255a0e3afebf74a5a87912697f17354fa

    • SSDEEP

      6144:WzjZ0wW+53t2QWJiyDN5uwER5yT330bqSRqnvRfWbR8m6:K0+53eJiyDNcSsRQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks