Overview

overview

10

Static

static

3

JaffaCakes...02.exe

windows7-x64

10

JaffaCakes...02.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_12fff4c7913baeb70e4f90408fd02902

  • Size

    4.6MB

  • Sample

    250106-g1gkls1kdl

  • MD5

    12fff4c7913baeb70e4f90408fd02902

  • SHA1

    0c514dde8503ab8aa59aa3466546796178346500

  • SHA256

    9f9a429b0b516480dcfea66ce16ba27e8a216476f845505df99bbcda44084b7b

  • SHA512

    e5a4e055cbc711d152ee269667863320a3d5314d742cf051095daf46fde548e07adfd45b0cd188cb2713bd3bef835f600788a779da01579f435bae2913a61beb

  • SSDEEP

    98304:RLNibDE4T+6g4X1Oq+RW4Ez4JY448eHmlqO1XRVCt:sE4T+YFOq8DEEmZ8Ym7B0

Score
10/10
redline@dmzmr_lzdiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

@DmZmR_lz

C2

185.215.113.79:41465

Attributes
  • auth_value

    3e9eda97b6589ac15756de0ba010d48f

Targets

    • Target

      JaffaCakes118_12fff4c7913baeb70e4f90408fd02902

    • Size

      4.6MB

    • MD5

      12fff4c7913baeb70e4f90408fd02902

    • SHA1

      0c514dde8503ab8aa59aa3466546796178346500

    • SHA256

      9f9a429b0b516480dcfea66ce16ba27e8a216476f845505df99bbcda44084b7b

    • SHA512

      e5a4e055cbc711d152ee269667863320a3d5314d742cf051095daf46fde548e07adfd45b0cd188cb2713bd3bef835f600788a779da01579f435bae2913a61beb

    • SSDEEP

      98304:RLNibDE4T+6g4X1Oq+RW4Ez4JY448eHmlqO1XRVCt:sE4T+YFOq8DEEmZ8Ym7B0

    Score
    10/10
    redline@dmzmr_lzdiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks