General

  • Target

    JaffaCakes118_2277bc489776977bfa7d6a63b776cdb2

  • Size

    4.6MB

  • Sample

    250106-n6sndsyjgj

  • MD5

    2277bc489776977bfa7d6a63b776cdb2

  • SHA1

    8371297e5463b68759089db830324e0d2884b5dc

  • SHA256

    0da3ef7a2d856343fc25d00296f6de95c56c62c0966e9a4b9cc4b043e3d4db9a

  • SHA512

    961fe7d0dff4a61638bab905df19640c8faae915980dccdee7956d5f8100a183269654e96394daf6af05f40cc082f953e1cf8f780d2a98bf9d8f46c468861ed5

  • SSDEEP

    98304:zLwiAM0fvDFoF3QsvwOQoWq1bksQD9Av9sAwky+So5sY3wdmyH:b0Mg/ObW+bksQBW92ky+S0sY3em

Malware Config

Extracted

Family

redline

Botnet

@Temshik159

C2

185.209.22.181:29234

Attributes
  • auth_value

    5a0918bd3e8ede8e02c8dd9d106a996d

Targets

    • Target

      JaffaCakes118_2277bc489776977bfa7d6a63b776cdb2

    • Size

      4.6MB

    • MD5

      2277bc489776977bfa7d6a63b776cdb2

    • SHA1

      8371297e5463b68759089db830324e0d2884b5dc

    • SHA256

      0da3ef7a2d856343fc25d00296f6de95c56c62c0966e9a4b9cc4b043e3d4db9a

    • SHA512

      961fe7d0dff4a61638bab905df19640c8faae915980dccdee7956d5f8100a183269654e96394daf6af05f40cc082f953e1cf8f780d2a98bf9d8f46c468861ed5

    • SSDEEP

      98304:zLwiAM0fvDFoF3QsvwOQoWq1bksQD9Av9sAwky+So5sY3wdmyH:b0Mg/ObW+bksQBW92ky+S0sY3em

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks