General

  • Target

    JaffaCakes118_47502c4fbfee81ffb2cc763b2c3a7014

  • Size

    832KB

  • Sample

    250107-cg52ms1lbn

  • MD5

    47502c4fbfee81ffb2cc763b2c3a7014

  • SHA1

    d26041802a760eb3c2d6504591573d186e77b2a8

  • SHA256

    a68371dab98b32a415c9a774cb972b5439a313946f06283917e05ecf83170391

  • SHA512

    7dedf8b6a4460ea7bbe0c95b0fcaa64e9c407bc7c195b80bb4ea9cc4151e1290ab23143dc2d862c6d94d5f1a2a8b7a1c562b93f5b7ee7c23144f32e1d1108a95

  • SSDEEP

    12288:3aq8GgDyMO9nXgab/b8ZuAcY0V5gmdLPdXbDmehoC16OLhTHlGNmWjP9:3aq8pGHnQafAoPUyJ6LNmi1

Malware Config

Extracted

Family

redline

Botnet

@alternativshikk

C2

5.188.118.163:80

Attributes
  • auth_value

    9bde7608ef33d6cbd8c01687cdd53196

Targets

    • Target

      JaffaCakes118_47502c4fbfee81ffb2cc763b2c3a7014

    • Size

      832KB

    • MD5

      47502c4fbfee81ffb2cc763b2c3a7014

    • SHA1

      d26041802a760eb3c2d6504591573d186e77b2a8

    • SHA256

      a68371dab98b32a415c9a774cb972b5439a313946f06283917e05ecf83170391

    • SHA512

      7dedf8b6a4460ea7bbe0c95b0fcaa64e9c407bc7c195b80bb4ea9cc4151e1290ab23143dc2d862c6d94d5f1a2a8b7a1c562b93f5b7ee7c23144f32e1d1108a95

    • SSDEEP

      12288:3aq8GgDyMO9nXgab/b8ZuAcY0V5gmdLPdXbDmehoC16OLhTHlGNmWjP9:3aq8pGHnQafAoPUyJ6LNmi1

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks