General

  • Target

    JaffaCakes118_5d6783a2b36ff42f159b9c27cd4dff9b

  • Size

    103KB

  • Sample

    250107-md65msynbl

  • MD5

    5d6783a2b36ff42f159b9c27cd4dff9b

  • SHA1

    fb81bfed6f2d5ceb85596542091c9b8b55407c60

  • SHA256

    4c3dd28a79b6a1b21b014cc6b1a31b048bfa3bbb43cb6a92450667cb84f4245b

  • SHA512

    39126d8a41074b37d46ef17614c00f6b69eaf99f07af2c9baaac6f5c1a66e9c0bb674cf49fe95f7e69c60b10a024007ba6075a8efc3058a23f3d131064d6cccc

  • SSDEEP

    3072:Q79qIq7pAwE0aSjYr/hSwwpwK4ejf65GB:B7WSjuH6Ic

Malware Config

Extracted

Family

redline

Botnet

500inst

C2

155.138.252.60:48926

Attributes
  • auth_value

    4f60ae4a880e49166d7b7a2d5661c156

Targets

    • Target

      JaffaCakes118_5d6783a2b36ff42f159b9c27cd4dff9b

    • Size

      103KB

    • MD5

      5d6783a2b36ff42f159b9c27cd4dff9b

    • SHA1

      fb81bfed6f2d5ceb85596542091c9b8b55407c60

    • SHA256

      4c3dd28a79b6a1b21b014cc6b1a31b048bfa3bbb43cb6a92450667cb84f4245b

    • SHA512

      39126d8a41074b37d46ef17614c00f6b69eaf99f07af2c9baaac6f5c1a66e9c0bb674cf49fe95f7e69c60b10a024007ba6075a8efc3058a23f3d131064d6cccc

    • SSDEEP

      3072:Q79qIq7pAwE0aSjYr/hSwwpwK4ejf65GB:B7WSjuH6Ic

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks