General

  • Target

    JaffaCakes118_b1053be5f3586f6785a57c911addc48c

  • Size

    836KB

  • Sample

    250108-2rnmsayrgq

  • MD5

    b1053be5f3586f6785a57c911addc48c

  • SHA1

    712b1ed92154916d48d20476cf7ff12da0c57609

  • SHA256

    e0c190537e74cb9253f2bf68203513de2a258ef427dbff8552310d8767adf71c

  • SHA512

    1d5b0f9c40ea2796b65835e11b1dff542d38607558dd903a922a3dea0f5e3ac117b6dcb597710d5c36851e737b1dce8069b94cff87b18c517928bcc9645eb7f4

  • SSDEEP

    12288:8TxETvPX2P3+6OCKLSx/XH5Zf6Rhcar4+QR5cepnSCdeTnEFMwuOqjYd:w+Tv+PO6OsxPTM94TSCdeKMwqjYd

Malware Config

Extracted

Family

redline

Botnet

@hatake03

C2

95.181.152.6:46927

Attributes
  • auth_value

    cdf3919a262c0d6ba99116b375d7551c

Targets

    • Target

      JaffaCakes118_b1053be5f3586f6785a57c911addc48c

    • Size

      836KB

    • MD5

      b1053be5f3586f6785a57c911addc48c

    • SHA1

      712b1ed92154916d48d20476cf7ff12da0c57609

    • SHA256

      e0c190537e74cb9253f2bf68203513de2a258ef427dbff8552310d8767adf71c

    • SHA512

      1d5b0f9c40ea2796b65835e11b1dff542d38607558dd903a922a3dea0f5e3ac117b6dcb597710d5c36851e737b1dce8069b94cff87b18c517928bcc9645eb7f4

    • SSDEEP

      12288:8TxETvPX2P3+6OCKLSx/XH5Zf6Rhcar4+QR5cepnSCdeTnEFMwuOqjYd:w+Tv+PO6OsxPTM94TSCdeKMwqjYd

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks