General

  • Target

    JaffaCakes118_9de8c7cb28923bbe39c5c668eae0f21f

  • Size

    839KB

  • Sample

    250108-n2g14a1lhn

  • MD5

    9de8c7cb28923bbe39c5c668eae0f21f

  • SHA1

    1f4d88fadb7648033c16a983376e96ce2f7b0039

  • SHA256

    844f5a9d5b9b4a552325449601071e0ecf449b04232ec16ddffe03ae404fc8a4

  • SHA512

    d2f310f98551207b1842d307cf17a1a175676b92cecde885d66b2b58e34da7664ca4e007a724bcb4bda35b10f4b8f0dec81bbe59f9ee3d07915c75eb37257278

  • SSDEEP

    12288:YL7CSb2gLre1WYMEUSILvWdbGSexg+rrMgpAz47kDLj/BRsDklNsSa:27rPfeECUbLAneq06uk/j5Rs4lWSa

Malware Config

Extracted

Family

redline

Botnet

@F1gaSebe

C2

95.181.152.6:46927

Attributes
  • auth_value

    cdf3919a262c0d6ba99116b375d7551c

Targets

    • Target

      JaffaCakes118_9de8c7cb28923bbe39c5c668eae0f21f

    • Size

      839KB

    • MD5

      9de8c7cb28923bbe39c5c668eae0f21f

    • SHA1

      1f4d88fadb7648033c16a983376e96ce2f7b0039

    • SHA256

      844f5a9d5b9b4a552325449601071e0ecf449b04232ec16ddffe03ae404fc8a4

    • SHA512

      d2f310f98551207b1842d307cf17a1a175676b92cecde885d66b2b58e34da7664ca4e007a724bcb4bda35b10f4b8f0dec81bbe59f9ee3d07915c75eb37257278

    • SSDEEP

      12288:YL7CSb2gLre1WYMEUSILvWdbGSexg+rrMgpAz47kDLj/BRsDklNsSa:27rPfeECUbLAneq06uk/j5Rs4lWSa

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks