General

  • Target

    JaffaCakes118_61862794a5a7137466a52163e5b9bd0a

  • Size

    1.1MB

  • Sample

    250107-n5y4saznh1

  • MD5

    61862794a5a7137466a52163e5b9bd0a

  • SHA1

    051a52c80fbd7f083b103a60ec2683f88c759870

  • SHA256

    88103d06e1160a89efa664187dc5d14ad32b37d154ffb49209b39ec1dac51e4d

  • SHA512

    a765436b76ea023c69a00826822da86dd70b011dec39103c6fc5e215c37e985080e9deb9e48c617d3618993853cd6c203c2fad56006406a2a84a94d845525057

  • SSDEEP

    24576:E0Vs8ABbiCw+SFuGzJgkcHXMVB52Sg/cmom2Ket6zattBcQuVhxY26E:Ej80L1SFulXMV/gkBmtet621vuVhd7

Malware Config

Extracted

Family

redline

Botnet

@Js_scr

C2

185.209.22.181:29234

Attributes
  • auth_value

    5a0918bd3e8ede8e02c8dd9d106a996d

Targets

    • Target

      JaffaCakes118_61862794a5a7137466a52163e5b9bd0a

    • Size

      1.1MB

    • MD5

      61862794a5a7137466a52163e5b9bd0a

    • SHA1

      051a52c80fbd7f083b103a60ec2683f88c759870

    • SHA256

      88103d06e1160a89efa664187dc5d14ad32b37d154ffb49209b39ec1dac51e4d

    • SHA512

      a765436b76ea023c69a00826822da86dd70b011dec39103c6fc5e215c37e985080e9deb9e48c617d3618993853cd6c203c2fad56006406a2a84a94d845525057

    • SSDEEP

      24576:E0Vs8ABbiCw+SFuGzJgkcHXMVB52Sg/cmom2Ket6zattBcQuVhxY26E:Ej80L1SFulXMV/gkBmtet621vuVhd7

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks