General

  • Target

    JaffaCakes118_a474eab536d11d2186497dd313c7ebde

  • Size

    855KB

  • Sample

    250108-rraqtawjhq

  • MD5

    a474eab536d11d2186497dd313c7ebde

  • SHA1

    8d8ef8fda268de326cfd47c0b07b62d1ff209425

  • SHA256

    4c983760fa089dc55c6f4351dcd106656f4c00779995ff9120610a0f5cfee8c8

  • SHA512

    8fd6a88725d9de9fb43b064c214ec2e39bba04addfb53c41a00c9be9b622c11aa18cc7d9d1ced37e085a2b8d70cfddfe526a72b08baafdfc2b49faceeb52010d

  • SSDEEP

    24576:/B2dZji6l2j45FpDSueJwj0VMM+eGybSmmA2BrXay:5Olixj4VS9MrybKdgy

Malware Config

Extracted

Family

redline

Botnet

@bbakoch

C2

92.119.113.189:21746

Attributes
  • auth_value

    de713911efa818890ac36085c9a0fc58

Targets

    • Target

      JaffaCakes118_a474eab536d11d2186497dd313c7ebde

    • Size

      855KB

    • MD5

      a474eab536d11d2186497dd313c7ebde

    • SHA1

      8d8ef8fda268de326cfd47c0b07b62d1ff209425

    • SHA256

      4c983760fa089dc55c6f4351dcd106656f4c00779995ff9120610a0f5cfee8c8

    • SHA512

      8fd6a88725d9de9fb43b064c214ec2e39bba04addfb53c41a00c9be9b622c11aa18cc7d9d1ced37e085a2b8d70cfddfe526a72b08baafdfc2b49faceeb52010d

    • SSDEEP

      24576:/B2dZji6l2j45FpDSueJwj0VMM+eGybSmmA2BrXay:5Olixj4VS9MrybKdgy

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks