General

  • Target

    JaffaCakes118_8f02247b1b0fd68e2b3f262aa2578f02

  • Size

    518KB

  • Sample

    250108-gknc8ayqgp

  • MD5

    8f02247b1b0fd68e2b3f262aa2578f02

  • SHA1

    8fae1793fd35608cc9fd615f34499ad871c14636

  • SHA256

    29368445dec9cb20a4691e21b00aad96b6ebda61094b4fa19c330a851c966c22

  • SHA512

    0dbb346eac0a4693fce873507c285313a52c647fe590456399616daccd10079c1bdbff69c17a3087aa472e609902fbe156fcbeaae0d6ce34188b4db225a04c27

  • SSDEEP

    3072:22QO7oDuy0aJ5+ISDOnXDsHHZt0N8dAJ2yAGflgsQVpLH:22cuG5+IJAz0N82J2xAbQVpT

Malware Config

Extracted

Family

redline

C2

141.94.188.138:46419

Attributes
  • auth_value

    3f48b95855158031ae9e7dafcb203009

Targets

    • Target

      JaffaCakes118_8f02247b1b0fd68e2b3f262aa2578f02

    • Size

      518KB

    • MD5

      8f02247b1b0fd68e2b3f262aa2578f02

    • SHA1

      8fae1793fd35608cc9fd615f34499ad871c14636

    • SHA256

      29368445dec9cb20a4691e21b00aad96b6ebda61094b4fa19c330a851c966c22

    • SHA512

      0dbb346eac0a4693fce873507c285313a52c647fe590456399616daccd10079c1bdbff69c17a3087aa472e609902fbe156fcbeaae0d6ce34188b4db225a04c27

    • SSDEEP

      3072:22QO7oDuy0aJ5+ISDOnXDsHHZt0N8dAJ2yAGflgsQVpLH:22cuG5+IJAz0N82J2xAbQVpT

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks