General

  • Target

    JaffaCakes118_00da230b109cc4dd182476477dab3a6d

  • Size

    848KB

  • Sample

    250105-27cv8a1kan

  • MD5

    00da230b109cc4dd182476477dab3a6d

  • SHA1

    bb781bb0d3c88813e22bdb936f5d35c4c2047217

  • SHA256

    aac64b1bf3d3e775c12e8eda8183defe196a9fcce2522ea8231f2b645c9749d4

  • SHA512

    6bc3bb141033eb936d6602d503b7a5e395c19ae8a44599110ddbcf2fbf8755ec1e257d6f97678758047d7c48a160cc091af16ca9a54ee25eb4c897126de9eea0

  • SSDEEP

    24576:2qE0PLdyAcnDx7o96mUmht0OtJUFkVGDF:NPLQAmDxs96mUk0OtMR

Malware Config

Extracted

Family

redline

Botnet

@Durak9876

C2

95.181.152.6:46927

Attributes
  • auth_value

    cdf3919a262c0d6ba99116b375d7551c

Targets

    • Target

      JaffaCakes118_00da230b109cc4dd182476477dab3a6d

    • Size

      848KB

    • MD5

      00da230b109cc4dd182476477dab3a6d

    • SHA1

      bb781bb0d3c88813e22bdb936f5d35c4c2047217

    • SHA256

      aac64b1bf3d3e775c12e8eda8183defe196a9fcce2522ea8231f2b645c9749d4

    • SHA512

      6bc3bb141033eb936d6602d503b7a5e395c19ae8a44599110ddbcf2fbf8755ec1e257d6f97678758047d7c48a160cc091af16ca9a54ee25eb4c897126de9eea0

    • SSDEEP

      24576:2qE0PLdyAcnDx7o96mUmht0OtJUFkVGDF:NPLQAmDxs96mUk0OtMR

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks