General

  • Target

    JaffaCakes118_c242afc110537366ea57e8e27a6fd7a6

  • Size

    103KB

  • Sample

    250109-h9xhvssrhy

  • MD5

    c242afc110537366ea57e8e27a6fd7a6

  • SHA1

    c46b034fea85d42beb0b406f43e2ef1fb3144ae8

  • SHA256

    ad61d8b18a9417982b956d18cf674a716aee75a332c41f14993d1c864bc0ee8d

  • SHA512

    6e989b1da55c56457b3690c6aedcc207126b3e9494599c605c6451c9fdce249ee77b1e2c8c72185c070d96a6ac7721448a539d71011d602c873e9916908c4648

  • SSDEEP

    3072:GsN6IYEQ0ASNwr/vUwQ3dhReff6ub8PXXY:uSN2LtkXXY

Malware Config

Extracted

Family

redline

Botnet

builder

C2

65.108.14.118:53868

Attributes
  • auth_value

    0aa1accf6b8c22c36f0ecf0d20dd081e

Targets

    • Target

      JaffaCakes118_c242afc110537366ea57e8e27a6fd7a6

    • Size

      103KB

    • MD5

      c242afc110537366ea57e8e27a6fd7a6

    • SHA1

      c46b034fea85d42beb0b406f43e2ef1fb3144ae8

    • SHA256

      ad61d8b18a9417982b956d18cf674a716aee75a332c41f14993d1c864bc0ee8d

    • SHA512

      6e989b1da55c56457b3690c6aedcc207126b3e9494599c605c6451c9fdce249ee77b1e2c8c72185c070d96a6ac7721448a539d71011d602c873e9916908c4648

    • SSDEEP

      3072:GsN6IYEQ0ASNwr/vUwQ3dhReff6ub8PXXY:uSN2LtkXXY

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks