General

  • Target

    JaffaCakes118_a61709566186ab4d206050255ca9fbf6

  • Size

    333KB

  • Sample

    250105-qbt9vavmct

  • MD5

    a61709566186ab4d206050255ca9fbf6

  • SHA1

    e36b7f66351f452155c5a3fd3f6f5d44d5bf6dee

  • SHA256

    1533414d7249d5e78c335c618644d74af00f7ee0209effd400f50f3249c2ff03

  • SHA512

    d9d997d033b0b8c485c362b2441363cb8841576c1b6fbb2329eb27bfe297752445f8b5da8817d05937ffa9c695c5d23516d327232c04d648cf79dec7a03457ae

  • SSDEEP

    6144:jY6WHt0CEvCwJLddr1PECztCKIADG8el:jBQt0bCmdNiKxD

Malware Config

Extracted

Family

redline

Botnet

BTC-2021

C2

2.56.214.190:59628

Attributes
  • auth_value

    6c5b31f95a67868564a59aef104cea8d

Targets

    • Target

      JaffaCakes118_a61709566186ab4d206050255ca9fbf6

    • Size

      333KB

    • MD5

      a61709566186ab4d206050255ca9fbf6

    • SHA1

      e36b7f66351f452155c5a3fd3f6f5d44d5bf6dee

    • SHA256

      1533414d7249d5e78c335c618644d74af00f7ee0209effd400f50f3249c2ff03

    • SHA512

      d9d997d033b0b8c485c362b2441363cb8841576c1b6fbb2329eb27bfe297752445f8b5da8817d05937ffa9c695c5d23516d327232c04d648cf79dec7a03457ae

    • SSDEEP

      6144:jY6WHt0CEvCwJLddr1PECztCKIADG8el:jBQt0bCmdNiKxD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks