General

  • Target

    JaffaCakes118_70598ba8433e3a26d82c96d9326335d6

  • Size

    905KB

  • Sample

    250107-v6p1tssrck

  • MD5

    70598ba8433e3a26d82c96d9326335d6

  • SHA1

    e83f93689c40f3566959cdbbcc89972d7039c19a

  • SHA256

    fdae7bcf6b15f91acfab2b15935ed5061737145ee46ed8a88f08b218385d645b

  • SHA512

    178a0f0f0945a65a8eaa15ba073bc939cf19af416cbb3afe57c22046258419f7c6559b5c972e18ad78fb6b94082620eb342131a5c57afad17fd617926ee3c3f0

  • SSDEEP

    12288:Cl6BVYM+0b0pBp/A5b52oX/THDXKUzS4f9zNT7LhZSTEfNGHdpoxS/9/Ed8A:YUVYT4+D/B4D+0hZSTEF8dpJ/9/68A

Malware Config

Extracted

Family

redline

Botnet

@PrestiJL

C2

95.181.152.6:46927

Attributes
  • auth_value

    cdf3919a262c0d6ba99116b375d7551c

Targets

    • Target

      JaffaCakes118_70598ba8433e3a26d82c96d9326335d6

    • Size

      905KB

    • MD5

      70598ba8433e3a26d82c96d9326335d6

    • SHA1

      e83f93689c40f3566959cdbbcc89972d7039c19a

    • SHA256

      fdae7bcf6b15f91acfab2b15935ed5061737145ee46ed8a88f08b218385d645b

    • SHA512

      178a0f0f0945a65a8eaa15ba073bc939cf19af416cbb3afe57c22046258419f7c6559b5c972e18ad78fb6b94082620eb342131a5c57afad17fd617926ee3c3f0

    • SSDEEP

      12288:Cl6BVYM+0b0pBp/A5b52oX/THDXKUzS4f9zNT7LhZSTEfNGHdpoxS/9/Ed8A:YUVYT4+D/B4D+0hZSTEF8dpJ/9/68A

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks