General

  • Target

    JaffaCakes118_65cc9944fab0c163e4efcee16b9862b162873aa821602ac044dd1cf1114eba9b

  • Size

    744.1MB

  • Sample

    241230-v1fvzatlcy

  • MD5

    149dc599dc1df3c4fdfaa40356932981

  • SHA1

    1abd243cc4bb9731cc3e1af063a32f995196934c

  • SHA256

    65cc9944fab0c163e4efcee16b9862b162873aa821602ac044dd1cf1114eba9b

  • SHA512

    e5cbeaf6a443f7cb4e24833b84ef73ce559e638cccf49e4b14b6c3a7c042ae0e3770a7e4e6a2fb3156be70f7b4e247534d1cc380b762cd2e3033f274bb903d77

  • SSDEEP

    3072:O5ag3+uewB3SOwzzHKeyzmUk3BPtSgeFoxT6Wo+tPS9+7MmA6EtLhps5nz0gwAk7:O5aguuewB3H+FtDSgTV09m9+hxe

Malware Config

Extracted

Family

redline

Botnet

1420836138_99

C2

dragrun.top:28786

Attributes
  • auth_value

    4aadbeb8eb384fe698f24dde846a0759

Targets

    • Target

      JaffaCakes118_65cc9944fab0c163e4efcee16b9862b162873aa821602ac044dd1cf1114eba9b

    • Size

      744.1MB

    • MD5

      149dc599dc1df3c4fdfaa40356932981

    • SHA1

      1abd243cc4bb9731cc3e1af063a32f995196934c

    • SHA256

      65cc9944fab0c163e4efcee16b9862b162873aa821602ac044dd1cf1114eba9b

    • SHA512

      e5cbeaf6a443f7cb4e24833b84ef73ce559e638cccf49e4b14b6c3a7c042ae0e3770a7e4e6a2fb3156be70f7b4e247534d1cc380b762cd2e3033f274bb903d77

    • SSDEEP

      3072:O5ag3+uewB3SOwzzHKeyzmUk3BPtSgeFoxT6Wo+tPS9+7MmA6EtLhps5nz0gwAk7:O5aguuewB3H+FtDSgTV09m9+hxe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks