General

  • Target

    JaffaCakes118_95e82a0b2a99370162fa203994cc8b0e

  • Size

    4.6MB

  • Sample

    250108-kenctaskes

  • MD5

    95e82a0b2a99370162fa203994cc8b0e

  • SHA1

    807f363607e6808b1cb7504de1ef9718343bd2cc

  • SHA256

    139c83b8cf3674d992e04f9e4a047c3a7ad5279b2f6b8bf18c39603f82bca16d

  • SHA512

    51d01ba0c1b46270780df84e925dffd1800355229b8a23b820565e66ea973ad46fb614d19371725d1afcb30fa9393429532d225b8389920c92ba2cf8df3620f2

  • SSDEEP

    98304:wLIgXzEGmyPe4pTQAXf8bTAbqKRf4fRDpvX4:sdpT5XpeEf4fRl

Malware Config

Extracted

Family

redline

Botnet

@l_Like_a_Sir_l

C2

138.124.186.121:45760

Attributes
  • auth_value

    9b509f3ca2ec2a739920d789362e5ac4

Targets

    • Target

      JaffaCakes118_95e82a0b2a99370162fa203994cc8b0e

    • Size

      4.6MB

    • MD5

      95e82a0b2a99370162fa203994cc8b0e

    • SHA1

      807f363607e6808b1cb7504de1ef9718343bd2cc

    • SHA256

      139c83b8cf3674d992e04f9e4a047c3a7ad5279b2f6b8bf18c39603f82bca16d

    • SHA512

      51d01ba0c1b46270780df84e925dffd1800355229b8a23b820565e66ea973ad46fb614d19371725d1afcb30fa9393429532d225b8389920c92ba2cf8df3620f2

    • SSDEEP

      98304:wLIgXzEGmyPe4pTQAXf8bTAbqKRf4fRDpvX4:sdpT5XpeEf4fRl

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks