General

  • Target

    JaffaCakes118_698eeadcc372bf49bda35c160181c907

  • Size

    859KB

  • Sample

    250107-sc7mnswkfz

  • MD5

    698eeadcc372bf49bda35c160181c907

  • SHA1

    beaee8d6548cdb5e2ddf1f0b9fb07ff6e8b14265

  • SHA256

    d95be841918ea1554b19ee93b52ab651f0ab0d53c1aab7e58439babb866eefee

  • SHA512

    fa21e56c942301ec40a3d4509a339345060d34c369ed301d1e7187ca2672661bcdd6ef9430550a85643b35323ae73c0c16b4f5e21b4caedcafca9e8b217e7342

  • SSDEEP

    12288:YOdplud53QIolhA9s0SjEOm17avNGpWasRDuhyOLQXpC3WFlMZPvyRlgNr8+WGu+:7/g3Q1lhACERAGpWGpU5SXyRSNXD3ivk

Malware Config

Extracted

Family

redline

Botnet

@tupa187

C2

95.181.152.6:46927

Attributes
  • auth_value

    cdf3919a262c0d6ba99116b375d7551c

Targets

    • Target

      JaffaCakes118_698eeadcc372bf49bda35c160181c907

    • Size

      859KB

    • MD5

      698eeadcc372bf49bda35c160181c907

    • SHA1

      beaee8d6548cdb5e2ddf1f0b9fb07ff6e8b14265

    • SHA256

      d95be841918ea1554b19ee93b52ab651f0ab0d53c1aab7e58439babb866eefee

    • SHA512

      fa21e56c942301ec40a3d4509a339345060d34c369ed301d1e7187ca2672661bcdd6ef9430550a85643b35323ae73c0c16b4f5e21b4caedcafca9e8b217e7342

    • SSDEEP

      12288:YOdplud53QIolhA9s0SjEOm17avNGpWasRDuhyOLQXpC3WFlMZPvyRlgNr8+WGu+:7/g3Q1lhACERAGpWGpU5SXyRSNXD3ivk

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks