General

  • Target

    JaffaCakes118_31b98e6b868401f59434e04b6f1576f3e5c7b3415c03547255dae66a3b3f3832

  • Size

    690.8MB

  • Sample

    241227-asc4wswnav

  • MD5

    6f08f29d29f20c346f3ce0f48eff9501

  • SHA1

    4da2b9b4c09533b69bab68992b104815b47da766

  • SHA256

    31b98e6b868401f59434e04b6f1576f3e5c7b3415c03547255dae66a3b3f3832

  • SHA512

    9ffa3b0c7415a950c970b726f15b5224100af1c08578aacfd2b24dec6c8a086f67c7419105ca6e5bcb2a70c1bc4b172ad8a5f7db091da3e6c46bce68569d9d03

  • SSDEEP

    3072:lX1S3AqhsHHTK5VByymUk3BPtSgeFoxT6Wo+tPS9+7MmA6EtLhps5nz0gwAksmGO:lleAqhm4ItDSgTV09m9+hxG

Malware Config

Extracted

Family

redline

Botnet

1420836138_99

C2

dragrun.top:28786

Attributes
  • auth_value

    4aadbeb8eb384fe698f24dde846a0759

Targets

    • Target

      JaffaCakes118_31b98e6b868401f59434e04b6f1576f3e5c7b3415c03547255dae66a3b3f3832

    • Size

      690.8MB

    • MD5

      6f08f29d29f20c346f3ce0f48eff9501

    • SHA1

      4da2b9b4c09533b69bab68992b104815b47da766

    • SHA256

      31b98e6b868401f59434e04b6f1576f3e5c7b3415c03547255dae66a3b3f3832

    • SHA512

      9ffa3b0c7415a950c970b726f15b5224100af1c08578aacfd2b24dec6c8a086f67c7419105ca6e5bcb2a70c1bc4b172ad8a5f7db091da3e6c46bce68569d9d03

    • SSDEEP

      3072:lX1S3AqhsHHTK5VByymUk3BPtSgeFoxT6Wo+tPS9+7MmA6EtLhps5nz0gwAksmGO:lleAqhm4ItDSgTV09m9+hxG

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks