General

  • Target

    JaffaCakes118_7a482ac41af30a664ab972e493c81e7d

  • Size

    420KB

  • Sample

    250107-1bcd5szjax

  • MD5

    7a482ac41af30a664ab972e493c81e7d

  • SHA1

    b18f35ef69f6ba1345a5125ff2c70fbf68d84a89

  • SHA256

    bed0eb8b330eaccc07f42f943f9cf1ac359c8110db31223b712c68e7d5989ff2

  • SHA512

    63d5674e7000dcb3afb982bf030d453bf6e13b523774b18a6a4709b6f741a545d9e4460a038d645e0bf70d4fe2164bae8379d171a20345d4b0cc0b291bda0378

  • SSDEEP

    12288:KySmWyompH3niYkfgV1VezWB0TzUkCds5EMKbXVrzsu:7SxyosH3i9gVj6XU05EnlrP

Malware Config

Extracted

Family

redline

Botnet

5

C2

80.87.192.249:16640

Attributes
  • auth_value

    3e4c638c72124e45bcf5164456741cce

Targets

    • Target

      JaffaCakes118_7a482ac41af30a664ab972e493c81e7d

    • Size

      420KB

    • MD5

      7a482ac41af30a664ab972e493c81e7d

    • SHA1

      b18f35ef69f6ba1345a5125ff2c70fbf68d84a89

    • SHA256

      bed0eb8b330eaccc07f42f943f9cf1ac359c8110db31223b712c68e7d5989ff2

    • SHA512

      63d5674e7000dcb3afb982bf030d453bf6e13b523774b18a6a4709b6f741a545d9e4460a038d645e0bf70d4fe2164bae8379d171a20345d4b0cc0b291bda0378

    • SSDEEP

      12288:KySmWyompH3niYkfgV1VezWB0TzUkCds5EMKbXVrzsu:7SxyosH3i9gVj6XU05EnlrP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks