General

  • Target

    JaffaCakes118_20bb2e372b80e5d78b512bbd340a3ca3

  • Size

    406KB

  • Sample

    250106-nhxbnsvnev

  • MD5

    20bb2e372b80e5d78b512bbd340a3ca3

  • SHA1

    3631a2bddc5ea1470835b99e2f21a8eab2459cd0

  • SHA256

    064cc070cf8f69f557141e3cfbaccd301072e286b702b30c11a770ffdca06fb1

  • SHA512

    6a49183027a8d91fe9923e544bc810b855c9db0364b57e8d0155addf830f71201631e34a79d08eaa38c1f0674a8e5446937846a6bd3a4a86dd702b05d55e246e

  • SSDEEP

    12288:zt9HKnSjdzuv4+xXA9oNZg4Ej8S6ce8pq8P:zTqnwdc4+lZI8zceC1

Malware Config

Extracted

Family

redline

Botnet

NEWPUB1

C2

45.9.20.182:46792

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      JaffaCakes118_20bb2e372b80e5d78b512bbd340a3ca3

    • Size

      406KB

    • MD5

      20bb2e372b80e5d78b512bbd340a3ca3

    • SHA1

      3631a2bddc5ea1470835b99e2f21a8eab2459cd0

    • SHA256

      064cc070cf8f69f557141e3cfbaccd301072e286b702b30c11a770ffdca06fb1

    • SHA512

      6a49183027a8d91fe9923e544bc810b855c9db0364b57e8d0155addf830f71201631e34a79d08eaa38c1f0674a8e5446937846a6bd3a4a86dd702b05d55e246e

    • SSDEEP

      12288:zt9HKnSjdzuv4+xXA9oNZg4Ej8S6ce8pq8P:zTqnwdc4+lZI8zceC1

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks