General

  • Target

    JaffaCakes118_9d5db4dc5528fb0fb1535ecab6bb244f

  • Size

    517KB

  • Sample

    250108-nqv4kszrhl

  • MD5

    9d5db4dc5528fb0fb1535ecab6bb244f

  • SHA1

    76ea11cb9b0d437b15dfbb07c7bb5cfacf6c9599

  • SHA256

    33657f7b8278b9c5ad57762a143c057db1ac285702ef6ca250f9ef7c6bda9231

  • SHA512

    aa036ae2f346a0d63bb6b904b0c2a61cf78e4e0a17e43f927de7546011e2078875acff8253405606aee957de87b63b41155da5cf7d4782f0eaa3c460c8745a68

  • SSDEEP

    3072:7x/C4661LUFALMcnj4lOl7Mhv+lVgeme3GfPf9Hp78rqjMVIB0CUp27:7xzw6VneB+lVgemeYRZYXmBfUpK

Malware Config

Extracted

Family

redline

C2

141.94.188.138:46419

Attributes
  • auth_value

    3f48b95855158031ae9e7dafcb203009

Targets

    • Target

      JaffaCakes118_9d5db4dc5528fb0fb1535ecab6bb244f

    • Size

      517KB

    • MD5

      9d5db4dc5528fb0fb1535ecab6bb244f

    • SHA1

      76ea11cb9b0d437b15dfbb07c7bb5cfacf6c9599

    • SHA256

      33657f7b8278b9c5ad57762a143c057db1ac285702ef6ca250f9ef7c6bda9231

    • SHA512

      aa036ae2f346a0d63bb6b904b0c2a61cf78e4e0a17e43f927de7546011e2078875acff8253405606aee957de87b63b41155da5cf7d4782f0eaa3c460c8745a68

    • SSDEEP

      3072:7x/C4661LUFALMcnj4lOl7Mhv+lVgeme3GfPf9Hp78rqjMVIB0CUp27:7xzw6VneB+lVgemeYRZYXmBfUpK

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks