General

  • Target

    JaffaCakes118_31b9eb09d9e6532d88fd9b343230f406

  • Size

    441KB

  • Sample

    250106-wedddssray

  • MD5

    31b9eb09d9e6532d88fd9b343230f406

  • SHA1

    599195db1e3cde20969c7ee08615086ce4b92216

  • SHA256

    2edcd3034687d0de5c864f0145a8642e11159828229b3e63a04f31da813369bc

  • SHA512

    e0728c02a53ff375aa58caab4df85d24dd8e7d8aeabbd8f9a3283b285e6fabfa9d11f98ab322114dc076cca84be8d104da23142c6921fbca8dd4c557bd0813cb

  • SSDEEP

    6144:dTvm77n4/MMwhP6i7pG4k9NqftjCxBiCpaeOy6nqhIAIIWboH5VXK0/SVNV:dqX7NL7U4+qfcWMhkqhtI9cVa0KZ

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

193.150.103.37:29118

Attributes
  • auth_value

    f27db372188045eefdf974196ead3dae

Targets

    • Target

      JaffaCakes118_31b9eb09d9e6532d88fd9b343230f406

    • Size

      441KB

    • MD5

      31b9eb09d9e6532d88fd9b343230f406

    • SHA1

      599195db1e3cde20969c7ee08615086ce4b92216

    • SHA256

      2edcd3034687d0de5c864f0145a8642e11159828229b3e63a04f31da813369bc

    • SHA512

      e0728c02a53ff375aa58caab4df85d24dd8e7d8aeabbd8f9a3283b285e6fabfa9d11f98ab322114dc076cca84be8d104da23142c6921fbca8dd4c557bd0813cb

    • SSDEEP

      6144:dTvm77n4/MMwhP6i7pG4k9NqftjCxBiCpaeOy6nqhIAIIWboH5VXK0/SVNV:dqX7NL7U4+qfcWMhkqhtI9cVa0KZ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks