General

  • Target

    JaffaCakes118_be2cd6ed7c99fdc5a75fccad1a636d44247ae037fc903edde798448205717db8

  • Size

    749.6MB

  • Sample

    241230-2s8dksvpgx

  • MD5

    ff6c894fc40939b4e0613e31b121e8e6

  • SHA1

    c18d00afe2b26c029eb65f4e321316fa1ebf971d

  • SHA256

    be2cd6ed7c99fdc5a75fccad1a636d44247ae037fc903edde798448205717db8

  • SHA512

    8cfacb43b13cff5166d9ec85a8c4adfd587168026bcb817c16ee09be5b16eb5691eddb4ba98acd0b2b05d6cc64f023ccbcd692b3ed48d11d5304051b5c9eddad

  • SSDEEP

    3072:FMzb7MjXlEHFM+3Ozv7fet7nncGeynu+zLR+p5Kj/8mtghSbPnUQ5/WoG9e1PYdS:yzcDlEHF5gvqRpuSLLASxlW79e1Zb

Malware Config

Extracted

Family

redline

Botnet

5109461904_99

C2

dragrun.top:28786

Attributes
  • auth_value

    5e48ff991035f33bd42dee4f3e8296c0

Targets

    • Target

      JaffaCakes118_be2cd6ed7c99fdc5a75fccad1a636d44247ae037fc903edde798448205717db8

    • Size

      749.6MB

    • MD5

      ff6c894fc40939b4e0613e31b121e8e6

    • SHA1

      c18d00afe2b26c029eb65f4e321316fa1ebf971d

    • SHA256

      be2cd6ed7c99fdc5a75fccad1a636d44247ae037fc903edde798448205717db8

    • SHA512

      8cfacb43b13cff5166d9ec85a8c4adfd587168026bcb817c16ee09be5b16eb5691eddb4ba98acd0b2b05d6cc64f023ccbcd692b3ed48d11d5304051b5c9eddad

    • SSDEEP

      3072:FMzb7MjXlEHFM+3Ozv7fet7nncGeynu+zLR+p5Kj/8mtghSbPnUQ5/WoG9e1PYdS:yzcDlEHF5gvqRpuSLLASxlW79e1Zb

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks