General

  • Target

    JaffaCakes118_c016c9343b417230df66f2c2148811f27ca25f3363c682d3440e3893dedd5dbd

  • Size

    437KB

  • Sample

    241227-b2ws2ayjhq

  • MD5

    99391680e3bcedf82db64babea33abb2

  • SHA1

    d35c9932d55e227d990a7a55d379f6b53e9246ca

  • SHA256

    c016c9343b417230df66f2c2148811f27ca25f3363c682d3440e3893dedd5dbd

  • SHA512

    16f31e8bd07dcaf58ada9d9f23f8620c5f69cde25cd9726f750d189e809a4652499e060d590abf958184ccec85483af79de82229e3407806ce4595a4af5139bb

  • SSDEEP

    12288:2Ffs9HlEZBK4dxybglYn/0kWQTokMJ5aoAoyqkNYx6iTd2+:2SlSrPTYnsJ5GN1a

Malware Config

Extracted

Family

redline

Botnet

RUZKI

C2

185.215.113.29:34865

Attributes
  • auth_value

    7787ecc647f66a171613d91bd46a7ce7

Targets

    • Target

      JaffaCakes118_c016c9343b417230df66f2c2148811f27ca25f3363c682d3440e3893dedd5dbd

    • Size

      437KB

    • MD5

      99391680e3bcedf82db64babea33abb2

    • SHA1

      d35c9932d55e227d990a7a55d379f6b53e9246ca

    • SHA256

      c016c9343b417230df66f2c2148811f27ca25f3363c682d3440e3893dedd5dbd

    • SHA512

      16f31e8bd07dcaf58ada9d9f23f8620c5f69cde25cd9726f750d189e809a4652499e060d590abf958184ccec85483af79de82229e3407806ce4595a4af5139bb

    • SSDEEP

      12288:2Ffs9HlEZBK4dxybglYn/0kWQTokMJ5aoAoyqkNYx6iTd2+:2SlSrPTYnsJ5GN1a

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks