General

  • Target

    JaffaCakes118_59bd2fca527f56362d7b7ace29258e5b

  • Size

    405KB

  • Sample

    250107-kydmqatnhx

  • MD5

    59bd2fca527f56362d7b7ace29258e5b

  • SHA1

    f0a41b9cc62d571b4503922af174e8468d2a3e5b

  • SHA256

    858d2384fe0e2ed91c2e2400e4f58435d59989a0e209747004a0e63f898ba483

  • SHA512

    cbde04dfffa4f9f05edb135d2263e5d515a1ab9978517a82c083d0de09508f334f618fe2fd4907c178ff815c5d8ca91fc455e8b69753e8cbf84cd8e94afb33c9

  • SSDEEP

    12288:9m4q/GxSh+9Dc+Y16CbZtIjR1A08BqR5j:9bq/qtkzIjfA0eU

Malware Config

Extracted

Family

redline

Botnet

mix23.10

C2

185.215.113.15:21508

Attributes
  • auth_value

    408e5b97cb89314de620529179330c9a

Targets

    • Target

      JaffaCakes118_59bd2fca527f56362d7b7ace29258e5b

    • Size

      405KB

    • MD5

      59bd2fca527f56362d7b7ace29258e5b

    • SHA1

      f0a41b9cc62d571b4503922af174e8468d2a3e5b

    • SHA256

      858d2384fe0e2ed91c2e2400e4f58435d59989a0e209747004a0e63f898ba483

    • SHA512

      cbde04dfffa4f9f05edb135d2263e5d515a1ab9978517a82c083d0de09508f334f618fe2fd4907c178ff815c5d8ca91fc455e8b69753e8cbf84cd8e94afb33c9

    • SSDEEP

      12288:9m4q/GxSh+9Dc+Y16CbZtIjR1A08BqR5j:9bq/qtkzIjfA0eU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks