General

  • Target

    JaffaCakes118_837514b1975e4c501a8652f7970129c4

  • Size

    117KB

  • Sample

    250108-bsjgcazleq

  • MD5

    837514b1975e4c501a8652f7970129c4

  • SHA1

    0a92ee957d7248ef6f72447eb0f7de7a2a46efc5

  • SHA256

    e00e4b0b0e052652fb4d2816a42089b6e4117a89365d21b1ba55b48bf3c6b40d

  • SHA512

    cdd2baf2d742a3e9ac33de1905a5ae04f7d8386469bacbb386fd2ac638812a0f5e2782c09bad309101140d30b1e9b4ea1bf00d1aad89f693ba0013c98c0080a8

  • SSDEEP

    3072:CZkCsQbLjlp5qM+iBWnOMAk7lIdPVTIJvkc:BIbLjlp5qM+POMvzi

Malware Config

Extracted

Family

redline

Botnet

@hensssy

C2

80.85.137.119:45288

Attributes
  • auth_value

    11d5f11526c576a9907e150ebe4a59df

Targets

    • Target

      JaffaCakes118_837514b1975e4c501a8652f7970129c4

    • Size

      117KB

    • MD5

      837514b1975e4c501a8652f7970129c4

    • SHA1

      0a92ee957d7248ef6f72447eb0f7de7a2a46efc5

    • SHA256

      e00e4b0b0e052652fb4d2816a42089b6e4117a89365d21b1ba55b48bf3c6b40d

    • SHA512

      cdd2baf2d742a3e9ac33de1905a5ae04f7d8386469bacbb386fd2ac638812a0f5e2782c09bad309101140d30b1e9b4ea1bf00d1aad89f693ba0013c98c0080a8

    • SSDEEP

      3072:CZkCsQbLjlp5qM+iBWnOMAk7lIdPVTIJvkc:BIbLjlp5qM+POMvzi

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks