General

  • Target

    JaffaCakes118_a709199cb2df04bca70809381d483593590bcd38dbfa0a143fcd610c6c64ab52

  • Size

    723.6MB

  • Sample

    241225-rde4davkfz

  • MD5

    7ddc56f2f06776d814b96066f7798241

  • SHA1

    41040f7d0a4e48ad8358abeb0ae43296ef8204d0

  • SHA256

    a709199cb2df04bca70809381d483593590bcd38dbfa0a143fcd610c6c64ab52

  • SHA512

    724ec552e7ea342e83aee4fd07de8d4a5b2a215076facbf388921727b40ae40ab6bc8d86cfc0847a65614aa43f88458c7f931e881ab5085b19793483d1a4de42

  • SSDEEP

    3072:41Qm1qPIb6zVf3ytd8xR9hebpTUz16y/1hJgNVTLHNjWEGUOmGw5:dmZikMR9hexU9+HNjWzU/p

Malware Config

Extracted

Family

redline

Botnet

5769453016_99

C2

dumuzid.top:28786

Attributes
  • auth_value

    e901f0985f613b7b4e8ebb103a2e39b4

Targets

    • Target

      JaffaCakes118_a709199cb2df04bca70809381d483593590bcd38dbfa0a143fcd610c6c64ab52

    • Size

      723.6MB

    • MD5

      7ddc56f2f06776d814b96066f7798241

    • SHA1

      41040f7d0a4e48ad8358abeb0ae43296ef8204d0

    • SHA256

      a709199cb2df04bca70809381d483593590bcd38dbfa0a143fcd610c6c64ab52

    • SHA512

      724ec552e7ea342e83aee4fd07de8d4a5b2a215076facbf388921727b40ae40ab6bc8d86cfc0847a65614aa43f88458c7f931e881ab5085b19793483d1a4de42

    • SSDEEP

      3072:41Qm1qPIb6zVf3ytd8xR9hebpTUz16y/1hJgNVTLHNjWEGUOmGw5:dmZikMR9hexU9+HNjWzU/p

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks