General

  • Target

    JaffaCakes118_9343b04500c8c7cf5f331656570dc10b

  • Size

    519KB

  • Sample

    250108-jeaw2szng1

  • MD5

    9343b04500c8c7cf5f331656570dc10b

  • SHA1

    552daa852dc59b8407c3adbba3c3308dfcd51e16

  • SHA256

    73661b5b5308e929f4784e4a3a1b5071814273e0def0578596ccd2d2732631ad

  • SHA512

    e051df755a9ee5e7d3c67ed39f242ebddcd01eb28f42c049ddd6cda25ef07402ebb46f4dd94a95d107894d077fbe75a795f60c5d1276fde5ec65b6ea2395b211

  • SSDEEP

    3072:vpJWJ1sMOjAv4FYh4r+XMV7DXTS74Q2QKsTLx6oimhCS0kJUZVGtT:vpJWJuMD4FYhM+cXTS2QKsnx6WjaVGV

Malware Config

Extracted

Family

redline

C2

141.94.188.138:46419

Attributes
  • auth_value

    3f48b95855158031ae9e7dafcb203009

Targets

    • Target

      JaffaCakes118_9343b04500c8c7cf5f331656570dc10b

    • Size

      519KB

    • MD5

      9343b04500c8c7cf5f331656570dc10b

    • SHA1

      552daa852dc59b8407c3adbba3c3308dfcd51e16

    • SHA256

      73661b5b5308e929f4784e4a3a1b5071814273e0def0578596ccd2d2732631ad

    • SHA512

      e051df755a9ee5e7d3c67ed39f242ebddcd01eb28f42c049ddd6cda25ef07402ebb46f4dd94a95d107894d077fbe75a795f60c5d1276fde5ec65b6ea2395b211

    • SSDEEP

      3072:vpJWJ1sMOjAv4FYh4r+XMV7DXTS74Q2QKsTLx6oimhCS0kJUZVGtT:vpJWJuMD4FYhM+cXTS2QKsnx6WjaVGV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks