General

  • Target

    JaffaCakes118_af78555fbba2f77f442e1c26a42e431d

  • Size

    347KB

  • Sample

    250108-15c8jayjbq

  • MD5

    af78555fbba2f77f442e1c26a42e431d

  • SHA1

    afbb32fa0d7eefbba2a7bd805d67fbec1f0c7163

  • SHA256

    cc4e8e92de95797e7b0822d82705cbf593fbd624ff96110c2d2c1eaf158038c2

  • SHA512

    b0aee6ff19e2e474803ac0556ca3f890516156055203b17886b70a5f921539d7865fca22a80d1a9558573c95f512fdbc28f002899569e11be925dfb4b9be58e4

  • SSDEEP

    6144:5HmzrLpBkxJeo1cHgk+CRNvDxKNa/ZfjxkP8dgHJ6u2TP1IADG8elhsu:5GHLLGMqcAaN02zkP8du09xDksu

Malware Config

Extracted

Family

redline

Botnet

5

C2

80.87.192.249:16640

Attributes
  • auth_value

    3e4c638c72124e45bcf5164456741cce

Targets

    • Target

      JaffaCakes118_af78555fbba2f77f442e1c26a42e431d

    • Size

      347KB

    • MD5

      af78555fbba2f77f442e1c26a42e431d

    • SHA1

      afbb32fa0d7eefbba2a7bd805d67fbec1f0c7163

    • SHA256

      cc4e8e92de95797e7b0822d82705cbf593fbd624ff96110c2d2c1eaf158038c2

    • SHA512

      b0aee6ff19e2e474803ac0556ca3f890516156055203b17886b70a5f921539d7865fca22a80d1a9558573c95f512fdbc28f002899569e11be925dfb4b9be58e4

    • SSDEEP

      6144:5HmzrLpBkxJeo1cHgk+CRNvDxKNa/ZfjxkP8dgHJ6u2TP1IADG8elhsu:5GHLLGMqcAaN02zkP8du09xDksu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks