General

  • Target

    JaffaCakes118_7586741b93e311ab536e20cb450bcb2a

  • Size

    4.6MB

  • Sample

    250107-ycaktsvrav

  • MD5

    7586741b93e311ab536e20cb450bcb2a

  • SHA1

    1ce02572b6a5cac14ffff3bcedd11477ae3a631d

  • SHA256

    e31abe28b2f6fa085c9500bf0d3d460a63b4ad4296eae4d8e835bde61a989ef1

  • SHA512

    9072e7d1fdb950403ac98d9b59abd6bca60f7ff452c40de14add85d9c34abae41688a8be1903eacac71228d3892b44e10c2f71cab685acbb480d35dcf7035d1c

  • SSDEEP

    98304:HLDArvUT8rjxrQy+UAvsIbqFQR7FFPRV7eQjcICXFsal6k1BHE3JB8tZq7:2JQyllQR7hGL11h4JKt8

Malware Config

Extracted

Family

redline

Botnet

@Durak9876

C2

95.181.152.6:46927

Attributes
  • auth_value

    cdf3919a262c0d6ba99116b375d7551c

Targets

    • Target

      JaffaCakes118_7586741b93e311ab536e20cb450bcb2a

    • Size

      4.6MB

    • MD5

      7586741b93e311ab536e20cb450bcb2a

    • SHA1

      1ce02572b6a5cac14ffff3bcedd11477ae3a631d

    • SHA256

      e31abe28b2f6fa085c9500bf0d3d460a63b4ad4296eae4d8e835bde61a989ef1

    • SHA512

      9072e7d1fdb950403ac98d9b59abd6bca60f7ff452c40de14add85d9c34abae41688a8be1903eacac71228d3892b44e10c2f71cab685acbb480d35dcf7035d1c

    • SSDEEP

      98304:HLDArvUT8rjxrQy+UAvsIbqFQR7FFPRV7eQjcICXFsal6k1BHE3JB8tZq7:2JQyllQR7hGL11h4JKt8

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks