General

  • Target

    JaffaCakes118_befc426cb52a188996dcfd438288ec72

  • Size

    838KB

  • Sample

    250109-ft4acszlet

  • MD5

    befc426cb52a188996dcfd438288ec72

  • SHA1

    76cd2fcc104a2f358a1a7e46d9d36b2e259856fc

  • SHA256

    85812cd4a2cc6d0a0db5aa493e8bfe0bafe336691eac10d580d9cb7620db9c81

  • SHA512

    79ca3be65bda87d469c179e5fc3cdcb7ba41063895fde2a145ca09c411fd16e42e3da9eed21652599c1dec3ace21953099e66f5ef108828e3411ccc455c02c82

  • SSDEEP

    24576:l9rtoBYCZBumHrX+l6d0BNxZQhqw35NXY4kHe:1oBpBuoSU0ZZQhqw35NIZ+

Malware Config

Extracted

Family

redline

Botnet

@kla1z

C2

95.181.152.6:46927

Attributes
  • auth_value

    cdf3919a262c0d6ba99116b375d7551c

Targets

    • Target

      JaffaCakes118_befc426cb52a188996dcfd438288ec72

    • Size

      838KB

    • MD5

      befc426cb52a188996dcfd438288ec72

    • SHA1

      76cd2fcc104a2f358a1a7e46d9d36b2e259856fc

    • SHA256

      85812cd4a2cc6d0a0db5aa493e8bfe0bafe336691eac10d580d9cb7620db9c81

    • SHA512

      79ca3be65bda87d469c179e5fc3cdcb7ba41063895fde2a145ca09c411fd16e42e3da9eed21652599c1dec3ace21953099e66f5ef108828e3411ccc455c02c82

    • SSDEEP

      24576:l9rtoBYCZBumHrX+l6d0BNxZQhqw35NXY4kHe:1oBpBuoSU0ZZQhqw35NIZ+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks