General

  • Target

    JaffaCakes118_69f62b5de4919783262b45158ecb86ea

  • Size

    183KB

  • Sample

    250107-sjlnsawmf1

  • MD5

    69f62b5de4919783262b45158ecb86ea

  • SHA1

    c366f0500a28f504e348ab37fa43dafe189d9ab9

  • SHA256

    70c97eee62e950ad16cf1ab32abd589edca0f9179d611a4f01c76d9498816fa1

  • SHA512

    be29ba27ef3c60be2403fdf4b16ddec5cae04f64048f41126595adf42bfaef2e78d3cdf09bbc9016c0a171bf3bfaaf4393c1adb3754b44378661b39d37c28a57

  • SSDEEP

    3072:EuqhsgGmVhPDDoi+WWV4YliqHzyH/A+LQXFGzP+4Dtf4mEQ20VIJ:mhPGmVVDoi+WWdiqHzyfA+uFYGdmj8

Malware Config

Extracted

Family

redline

C2

185.215.113.51:56632

Attributes
  • auth_value

    8a057b047bb60399b5cc0fa800e50e51

Targets

    • Target

      JaffaCakes118_69f62b5de4919783262b45158ecb86ea

    • Size

      183KB

    • MD5

      69f62b5de4919783262b45158ecb86ea

    • SHA1

      c366f0500a28f504e348ab37fa43dafe189d9ab9

    • SHA256

      70c97eee62e950ad16cf1ab32abd589edca0f9179d611a4f01c76d9498816fa1

    • SHA512

      be29ba27ef3c60be2403fdf4b16ddec5cae04f64048f41126595adf42bfaef2e78d3cdf09bbc9016c0a171bf3bfaaf4393c1adb3754b44378661b39d37c28a57

    • SSDEEP

      3072:EuqhsgGmVhPDDoi+WWV4YliqHzyH/A+LQXFGzP+4Dtf4mEQ20VIJ:mhPGmVVDoi+WWdiqHzyfA+uFYGdmj8

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks