General

  • Target

    JaffaCakes118_bbb88d043d38be1329f6d4a1a419639ed37ee3be6cb0e28819cb7cd668af93ee

  • Size

    677.8MB

  • Sample

    241229-3n3g7szrgw

  • MD5

    449274723dd5ecf981189765ccd1591b

  • SHA1

    c13de19d75a9929a8fdb7b0a6289aee762ef32cf

  • SHA256

    bbb88d043d38be1329f6d4a1a419639ed37ee3be6cb0e28819cb7cd668af93ee

  • SHA512

    f04cff591f16a5b147e18304cdcc377dd5d668c4825eadab6ed71b098419908c5498fd7e75ffc1bbb42629464ff768e5058eababdb3ec4dcefff33752e7275c2

  • SSDEEP

    6144:rHFIQG//xJO+JcPGeltT0daPXxKfy0NMYE5eQQQH4mfXPb1AOlUOtxs:5IQi/xJO+JcPG24fyQjuHY4/b1fUaxs

Malware Config

Extracted

Family

redline

Botnet

1220166673_99

C2

ijustrun.xyz:28786

Attributes
  • auth_value

    a93b8d3ce5677c6b78bf7ce4b8556a08

Targets

    • Target

      JaffaCakes118_bbb88d043d38be1329f6d4a1a419639ed37ee3be6cb0e28819cb7cd668af93ee

    • Size

      677.8MB

    • MD5

      449274723dd5ecf981189765ccd1591b

    • SHA1

      c13de19d75a9929a8fdb7b0a6289aee762ef32cf

    • SHA256

      bbb88d043d38be1329f6d4a1a419639ed37ee3be6cb0e28819cb7cd668af93ee

    • SHA512

      f04cff591f16a5b147e18304cdcc377dd5d668c4825eadab6ed71b098419908c5498fd7e75ffc1bbb42629464ff768e5058eababdb3ec4dcefff33752e7275c2

    • SSDEEP

      6144:rHFIQG//xJO+JcPGeltT0daPXxKfy0NMYE5eQQQH4mfXPb1AOlUOtxs:5IQi/xJO+JcPG24fyQjuHY4/b1fUaxs

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks