General

  • Target

    JaffaCakes118_cec8520f145a0dddbf1adbe4262e8b83

  • Size

    441KB

  • Sample

    250109-ws36zawraw

  • MD5

    cec8520f145a0dddbf1adbe4262e8b83

  • SHA1

    c88557afeb6db504b5e94838411d289714e8c193

  • SHA256

    75c1729f921ec241025388f991a462400494b804483f0392f0222fe3ed04ceb9

  • SHA512

    e5a8fa627bd944dadcee18d6b10cbc55df546083b167b11ffd5fe4d74fdf9fe67d3c630978dafb7fc2389db1ea9af0333f2ce97a886fb79d8747699985791867

  • SSDEEP

    12288:A/RZ9NnhYxra/jB7ptYlF8q6EoLC/mdgz:A5HNOxG+eqJoL2t

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

193.150.103.37:29118

Attributes
  • auth_value

    f27db372188045eefdf974196ead3dae

Targets

    • Target

      JaffaCakes118_cec8520f145a0dddbf1adbe4262e8b83

    • Size

      441KB

    • MD5

      cec8520f145a0dddbf1adbe4262e8b83

    • SHA1

      c88557afeb6db504b5e94838411d289714e8c193

    • SHA256

      75c1729f921ec241025388f991a462400494b804483f0392f0222fe3ed04ceb9

    • SHA512

      e5a8fa627bd944dadcee18d6b10cbc55df546083b167b11ffd5fe4d74fdf9fe67d3c630978dafb7fc2389db1ea9af0333f2ce97a886fb79d8747699985791867

    • SSDEEP

      12288:A/RZ9NnhYxra/jB7ptYlF8q6EoLC/mdgz:A5HNOxG+eqJoL2t

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks