General

  • Target

    JaffaCakes118_422406870a5d86c7dffc3283c7632d41

  • Size

    904KB

  • Sample

    250107-ac4a5swqfk

  • MD5

    422406870a5d86c7dffc3283c7632d41

  • SHA1

    b3465e6511c7f5bbaeb9362577c846d4a60e58e5

  • SHA256

    5ef39220b606b49cf99ed4a2d9cc797c52b4c7fbd93449da44e4b28d42a5a34f

  • SHA512

    e5f9048607e824bf1a860eac6f73cbb3e70cf8989b2441a04eaa15669eb3f5339c8961d87424de3b9254d1db12b21cfe621c6e89c634b55d4d34aaa1ad40655c

  • SSDEEP

    12288:8tulrt3OJjygN1I4WTYg1SiFMVO0ckLEPNiEhQ3ZAOJaQ/EaSQ3F5DShMZRGQctf:VJ63NSF1/xpkgQCQ3zEadD6WM/2Qr

Malware Config

Extracted

Family

redline

Botnet

@lovemeansdeath

C2

92.119.113.189:21746

Attributes
  • auth_value

    de713911efa818890ac36085c9a0fc58

Targets

    • Target

      JaffaCakes118_422406870a5d86c7dffc3283c7632d41

    • Size

      904KB

    • MD5

      422406870a5d86c7dffc3283c7632d41

    • SHA1

      b3465e6511c7f5bbaeb9362577c846d4a60e58e5

    • SHA256

      5ef39220b606b49cf99ed4a2d9cc797c52b4c7fbd93449da44e4b28d42a5a34f

    • SHA512

      e5f9048607e824bf1a860eac6f73cbb3e70cf8989b2441a04eaa15669eb3f5339c8961d87424de3b9254d1db12b21cfe621c6e89c634b55d4d34aaa1ad40655c

    • SSDEEP

      12288:8tulrt3OJjygN1I4WTYg1SiFMVO0ckLEPNiEhQ3ZAOJaQ/EaSQ3F5DShMZRGQctf:VJ63NSF1/xpkgQCQ3zEadD6WM/2Qr

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks