General

  • Target

    JaffaCakes118_8fb699aae1061d95f4b06fccad7c56e2

  • Size

    360KB

  • Sample

    250108-gxbvyszlgr

  • MD5

    8fb699aae1061d95f4b06fccad7c56e2

  • SHA1

    23ead70d5146c0a9696014c45317a04a983bb586

  • SHA256

    6ee08c01dcb3096b7a7d00c7bf4675735ef47eee67cf72afac860bac3483cfdf

  • SHA512

    45851450faafe97ecfd0323e6714183f6c92ab734d69f1b02de57dbdb562d8d2fe80be04e1579c7ea9eea1d4e065a75e4b0bae5dd38d2dd66a34022a9d67fac4

  • SSDEEP

    6144:0/7REDvYqgOsFFqgOqgWz9xjCHESvNcMfKuvireWyUPCUTIq3Ka:09EDvYHtmkwioKuqTIml

Malware Config

Targets

    • Target

      JaffaCakes118_8fb699aae1061d95f4b06fccad7c56e2

    • Size

      360KB

    • MD5

      8fb699aae1061d95f4b06fccad7c56e2

    • SHA1

      23ead70d5146c0a9696014c45317a04a983bb586

    • SHA256

      6ee08c01dcb3096b7a7d00c7bf4675735ef47eee67cf72afac860bac3483cfdf

    • SHA512

      45851450faafe97ecfd0323e6714183f6c92ab734d69f1b02de57dbdb562d8d2fe80be04e1579c7ea9eea1d4e065a75e4b0bae5dd38d2dd66a34022a9d67fac4

    • SSDEEP

      6144:0/7REDvYqgOsFFqgOqgWz9xjCHESvNcMfKuvireWyUPCUTIq3Ka:09EDvYHtmkwioKuqTIml

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks