General

  • Target

    JaffaCakes118_820feb386ab2fb655af8fb27bf98e8651962e86e2f097efd7933254ccfe08491

  • Size

    700.0MB

  • Sample

    241230-cl966avkdl

  • MD5

    e8fef9ecefcd8f1ed19daa7222217862

  • SHA1

    184128fa8d70406650a35f5f11176aeff743e639

  • SHA256

    820feb386ab2fb655af8fb27bf98e8651962e86e2f097efd7933254ccfe08491

  • SHA512

    bcf1c5e4e4723f9f75c9ede59a7b01c83978198ad4d52ebf6bb1bc0ac9d103d9396d2f77599cff25025f0d5fcdc3e89cd4d42e359aca575b775486d2087f6f9c

  • SSDEEP

    3072:GAP0jnTtzgAygRZihuihhQD5T3QkGJYTlh+cDyhEhA+M/xdpe1LIjLIMLkUzsz0T:XPAT931YumCAcw5y9+txOw

Malware Config

Extracted

Family

redline

C2

185.157.120.4:17355

Attributes
  • auth_value

    df28831db3b6f37bb6ef841379690d4c

Targets

    • Target

      JaffaCakes118_820feb386ab2fb655af8fb27bf98e8651962e86e2f097efd7933254ccfe08491

    • Size

      700.0MB

    • MD5

      e8fef9ecefcd8f1ed19daa7222217862

    • SHA1

      184128fa8d70406650a35f5f11176aeff743e639

    • SHA256

      820feb386ab2fb655af8fb27bf98e8651962e86e2f097efd7933254ccfe08491

    • SHA512

      bcf1c5e4e4723f9f75c9ede59a7b01c83978198ad4d52ebf6bb1bc0ac9d103d9396d2f77599cff25025f0d5fcdc3e89cd4d42e359aca575b775486d2087f6f9c

    • SSDEEP

      3072:GAP0jnTtzgAygRZihuihhQD5T3QkGJYTlh+cDyhEhA+M/xdpe1LIjLIMLkUzsz0T:XPAT931YumCAcw5y9+txOw

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks