General

  • Target

    JaffaCakes118_c19a2a19c70da6c33b26d26968153a75

  • Size

    886KB

  • Sample

    250109-hmqrssslfz

  • MD5

    c19a2a19c70da6c33b26d26968153a75

  • SHA1

    6df61dd4d37029f4bb674e710fcadbcd51e7fd50

  • SHA256

    c0bcfda6e5f66e8c279f4ec138626918d926d8454a7790bc4b5a01e3336c6929

  • SHA512

    06435dd9c84c9be766264824bb7b2f9789a4e29ce66334677bdd5c77b1cf1c0b6970e8fe7d21e8edcc72134db5a1dc30b2715ef1c2e341c686e79b9614c77ac6

  • SSDEEP

    12288:N2DvwJItFwTIlPuhelk5yb/mU9PZLmAUVhKK/yXkl78NIkAXDA/FREQ1LfRRboQD:N26gRHbhEVDA/TE4NRbpvxDxpt

Malware Config

Extracted

Family

redline

Botnet

@Jjjjjj17

C2

176.31.32.198:17055

Attributes
  • auth_value

    5d0a654aa77e883b8d4f1144b0955e9b

Targets

    • Target

      JaffaCakes118_c19a2a19c70da6c33b26d26968153a75

    • Size

      886KB

    • MD5

      c19a2a19c70da6c33b26d26968153a75

    • SHA1

      6df61dd4d37029f4bb674e710fcadbcd51e7fd50

    • SHA256

      c0bcfda6e5f66e8c279f4ec138626918d926d8454a7790bc4b5a01e3336c6929

    • SHA512

      06435dd9c84c9be766264824bb7b2f9789a4e29ce66334677bdd5c77b1cf1c0b6970e8fe7d21e8edcc72134db5a1dc30b2715ef1c2e341c686e79b9614c77ac6

    • SSDEEP

      12288:N2DvwJItFwTIlPuhelk5yb/mU9PZLmAUVhKK/yXkl78NIkAXDA/FREQ1LfRRboQD:N26gRHbhEVDA/TE4NRbpvxDxpt

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks