General

  • Target

    JaffaCakes118_7ad92fa4d4268b66a6610cce2a3af152

  • Size

    390KB

  • Sample

    250107-1j4hlazmdv

  • MD5

    7ad92fa4d4268b66a6610cce2a3af152

  • SHA1

    4175c887cba89a651ae28c9204f05ab0627aec0a

  • SHA256

    9daae176aab300e6fe248df60c1e0a5f9d444bc390fb61a7ef8841c839d2234b

  • SHA512

    ed1ee545d98eba72c995e2ad16746a7eff60635e3655295bc6568326bce4a1e674dcc640fb06af2c281a9a1e2f95566b140b99882717293cfb1d594053685acc

  • SSDEEP

    12288:BQoTVgJpnBG5P5x4sMq8ZMeFrXy9rpdDEzBYDC+:mTJHC

Malware Config

Extracted

Family

redline

Botnet

newtes33

C2

kanerinasto.xyz:81

Attributes
  • auth_value

    11c4274dec83efea007b1dcb4478d075

Targets

    • Target

      JaffaCakes118_7ad92fa4d4268b66a6610cce2a3af152

    • Size

      390KB

    • MD5

      7ad92fa4d4268b66a6610cce2a3af152

    • SHA1

      4175c887cba89a651ae28c9204f05ab0627aec0a

    • SHA256

      9daae176aab300e6fe248df60c1e0a5f9d444bc390fb61a7ef8841c839d2234b

    • SHA512

      ed1ee545d98eba72c995e2ad16746a7eff60635e3655295bc6568326bce4a1e674dcc640fb06af2c281a9a1e2f95566b140b99882717293cfb1d594053685acc

    • SSDEEP

      12288:BQoTVgJpnBG5P5x4sMq8ZMeFrXy9rpdDEzBYDC+:mTJHC

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks