General

  • Target

    JaffaCakes118_ca350c138932752f9bcad395fa494567

  • Size

    441KB

  • Sample

    250109-rh7destnck

  • MD5

    ca350c138932752f9bcad395fa494567

  • SHA1

    33f44a9ac7f544e670978a5c0182caa2be3c7165

  • SHA256

    865ca01a0c270af79949d6250be9c5c563b044e8164aa6552c8b144c5a4122c3

  • SHA512

    7b196b2628bd6178f7b3031c7081cd7d40f53b77ea8823a1f504062ec18ec45b770189885f88f24ff7ded1a8abc88175f6ada60a163588fb66b5dcf639e3d0bd

  • SSDEEP

    12288:wPHTk6UCDyDaSfEzYDclx87tYqe2KBulW3t:wQ6UC++SxCqbKBwq

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

193.150.103.37:29118

Attributes
  • auth_value

    f27db372188045eefdf974196ead3dae

Targets

    • Target

      JaffaCakes118_ca350c138932752f9bcad395fa494567

    • Size

      441KB

    • MD5

      ca350c138932752f9bcad395fa494567

    • SHA1

      33f44a9ac7f544e670978a5c0182caa2be3c7165

    • SHA256

      865ca01a0c270af79949d6250be9c5c563b044e8164aa6552c8b144c5a4122c3

    • SHA512

      7b196b2628bd6178f7b3031c7081cd7d40f53b77ea8823a1f504062ec18ec45b770189885f88f24ff7ded1a8abc88175f6ada60a163588fb66b5dcf639e3d0bd

    • SSDEEP

      12288:wPHTk6UCDyDaSfEzYDclx87tYqe2KBulW3t:wQ6UC++SxCqbKBwq

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks