Overview

overview

10

Static

static

3

JaffaCakes...ba.exe

windows7-x64

10

JaffaCakes...ba.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_ae7c49c3410aa0ed787aafd3ce11f5ba

  • Size

    4.6MB

  • Sample

    250108-1qgbmsxmek

  • MD5

    ae7c49c3410aa0ed787aafd3ce11f5ba

  • SHA1

    ca2f7ee0968627bb652b7997bf69f94f468b3c8b

  • SHA256

    d3941ab8c35fe9c670058646954aff852c3f1bc9749b64dc680db3e802870882

  • SHA512

    040b90890faacaf6f7b0a3a89ba35e52ae0adc2fd9f4e0f86848972accaf84788bf50cf1a8a958430f551648b7b279ca1671ae66f59fe557f9f3e2962c79f450

  • SSDEEP

    98304:OLXd9/YCaX7Z1LhlaSiI/7uQabzDNDJoKDzMDqYbXk:W/VIj7F/7uQ83ND+tDlk

Score
10/10
redline@antoniksadiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

@antoniksa

C2

185.215.113.79:41465

Attributes
  • auth_value

    3e9eda97b6589ac15756de0ba010d48f

Targets

    • Target

      JaffaCakes118_ae7c49c3410aa0ed787aafd3ce11f5ba

    • Size

      4.6MB

    • MD5

      ae7c49c3410aa0ed787aafd3ce11f5ba

    • SHA1

      ca2f7ee0968627bb652b7997bf69f94f468b3c8b

    • SHA256

      d3941ab8c35fe9c670058646954aff852c3f1bc9749b64dc680db3e802870882

    • SHA512

      040b90890faacaf6f7b0a3a89ba35e52ae0adc2fd9f4e0f86848972accaf84788bf50cf1a8a958430f551648b7b279ca1671ae66f59fe557f9f3e2962c79f450

    • SSDEEP

      98304:OLXd9/YCaX7Z1LhlaSiI/7uQabzDNDJoKDzMDqYbXk:W/VIj7F/7uQ83ND+tDlk

    Score
    10/10
    redline@antoniksadiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks