General

  • Target

    JaffaCakes118_9e97bc3f960c74093263b348885657b6

  • Size

    485KB

  • Sample

    250108-pbzznayqhw

  • MD5

    9e97bc3f960c74093263b348885657b6

  • SHA1

    0922c67fea3702326a184d5b3a0d314fb9578aae

  • SHA256

    ce3523e1b3a42f4ecdd3902746c19e3f7089a2dec61d9f016f6180e1ec414669

  • SHA512

    852cf6073bd0356a67dd7c6df459590ac3bde14e56238bf36053433548799f7c9faf33f96101ce43fb23f05d3f39e8353f10b68999cb0987bcf851f50ecff811

  • SSDEEP

    3072:19PBOP6YFctlR06KJfiJymm69YQq+ve3fRmc+qIxO82Fk+7cG/Wa2EtV:19PBOSYFnffoyxp+v+fZu6

Malware Config

Extracted

Family

redline

C2

65.108.29.210:21638

Attributes
  • auth_value

    ad39d6a8ea7823f2a92f57ebaa4c98a5

Targets

    • Target

      JaffaCakes118_9e97bc3f960c74093263b348885657b6

    • Size

      485KB

    • MD5

      9e97bc3f960c74093263b348885657b6

    • SHA1

      0922c67fea3702326a184d5b3a0d314fb9578aae

    • SHA256

      ce3523e1b3a42f4ecdd3902746c19e3f7089a2dec61d9f016f6180e1ec414669

    • SHA512

      852cf6073bd0356a67dd7c6df459590ac3bde14e56238bf36053433548799f7c9faf33f96101ce43fb23f05d3f39e8353f10b68999cb0987bcf851f50ecff811

    • SSDEEP

      3072:19PBOP6YFctlR06KJfiJymm69YQq+ve3fRmc+qIxO82Fk+7cG/Wa2EtV:19PBOSYFnffoyxp+v+fZu6

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks