General

  • Target

    JaffaCakes118_61a4cfad52834c537ae1411a388e755c

  • Size

    441KB

  • Sample

    250107-n7fp8askfk

  • MD5

    61a4cfad52834c537ae1411a388e755c

  • SHA1

    e6d3f757b47c458dcb12f739924e0bce1f4b0afd

  • SHA256

    9b6a7db9202742073407252d5db59ded5b938f7c2e2383b00e87857f122be3bc

  • SHA512

    96e136b44e83627f050b69e2f61ca4a1444028337d14d8c1897263c34d268fd225f32badba5e8ca9318a77d6bb073550ad2124b0c81697d82e53323c01e84da8

  • SSDEEP

    12288:N4h87OqTg7qf1qxh8EiO+Dz3PuaU5rQgYDDM:Nr3CqwxQH3PPU5Uo

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

193.150.103.37:29118

Attributes
  • auth_value

    f27db372188045eefdf974196ead3dae

Targets

    • Target

      JaffaCakes118_61a4cfad52834c537ae1411a388e755c

    • Size

      441KB

    • MD5

      61a4cfad52834c537ae1411a388e755c

    • SHA1

      e6d3f757b47c458dcb12f739924e0bce1f4b0afd

    • SHA256

      9b6a7db9202742073407252d5db59ded5b938f7c2e2383b00e87857f122be3bc

    • SHA512

      96e136b44e83627f050b69e2f61ca4a1444028337d14d8c1897263c34d268fd225f32badba5e8ca9318a77d6bb073550ad2124b0c81697d82e53323c01e84da8

    • SSDEEP

      12288:N4h87OqTg7qf1qxh8EiO+Dz3PuaU5rQgYDDM:Nr3CqwxQH3PPU5Uo

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks