General

  • Target

    JaffaCakes118_9f580138414c874e3c6bb76734b28c78712cf87dfac21fb52c7f574c03836a3a

  • Size

    929.0MB

  • Sample

    241228-2b4ztstka1

  • MD5

    215b9c33f7c152c1081fb52e0fa61408

  • SHA1

    d5953827cc8ac930873878fbbe602ae74d2034db

  • SHA256

    9f580138414c874e3c6bb76734b28c78712cf87dfac21fb52c7f574c03836a3a

  • SHA512

    a6489ecbd1fb6d684957941435f3e55dcefdd4fe189b29aaf2c6d417162728960e756dbcf5c6007361996e341a9596ccbcf2be072f68db45d8eea35d7953082e

  • SSDEEP

    25165824:cnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnf:cnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnf

Malware Config

Extracted

Family

redline

Botnet

@RipnDick

C2

94.142.138.4:80

Attributes
  • auth_value

    83d99dc1c3407c6d90a5ae13a041150f

Targets

    • Target

      JaffaCakes118_9f580138414c874e3c6bb76734b28c78712cf87dfac21fb52c7f574c03836a3a

    • Size

      929.0MB

    • MD5

      215b9c33f7c152c1081fb52e0fa61408

    • SHA1

      d5953827cc8ac930873878fbbe602ae74d2034db

    • SHA256

      9f580138414c874e3c6bb76734b28c78712cf87dfac21fb52c7f574c03836a3a

    • SHA512

      a6489ecbd1fb6d684957941435f3e55dcefdd4fe189b29aaf2c6d417162728960e756dbcf5c6007361996e341a9596ccbcf2be072f68db45d8eea35d7953082e

    • SSDEEP

      25165824:cnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnf:cnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnf

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks