General

  • Target

    JaffaCakes118_2931eeb45a056464dc3e6e636dd555bb

  • Size

    864KB

  • Sample

    250106-r1xxps1nbl

  • MD5

    2931eeb45a056464dc3e6e636dd555bb

  • SHA1

    e585e280511cb4fb05134daa1fbeae6b254a7209

  • SHA256

    635c4ad3ff44bc67b78b1094d92189e4e9080f158ed5cdc1706f65eeaa6814d0

  • SHA512

    a35e15972210d7a7c9064e963681d87532e330b115327d01368954c89dfb12919501b1939924a7c411e1d71e92441c97988c618f3beae102b79e5465e93dcca5

  • SSDEEP

    12288:1sGIxqjG4NPHhUE1KggCMS45fCdwYSM3BS5eHz7+m2qwfa7aOa9O3eVf7NGUF:qRQjfBBUUL4RLmRamiTOqzNxF

Malware Config

Extracted

Family

redline

Botnet

@Durak9876

C2

95.181.152.6:46927

Attributes
  • auth_value

    cdf3919a262c0d6ba99116b375d7551c

Targets

    • Target

      JaffaCakes118_2931eeb45a056464dc3e6e636dd555bb

    • Size

      864KB

    • MD5

      2931eeb45a056464dc3e6e636dd555bb

    • SHA1

      e585e280511cb4fb05134daa1fbeae6b254a7209

    • SHA256

      635c4ad3ff44bc67b78b1094d92189e4e9080f158ed5cdc1706f65eeaa6814d0

    • SHA512

      a35e15972210d7a7c9064e963681d87532e330b115327d01368954c89dfb12919501b1939924a7c411e1d71e92441c97988c618f3beae102b79e5465e93dcca5

    • SSDEEP

      12288:1sGIxqjG4NPHhUE1KggCMS45fCdwYSM3BS5eHz7+m2qwfa7aOa9O3eVf7NGUF:qRQjfBBUUL4RLmRamiTOqzNxF

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks