General

  • Target

    JaffaCakes118_e1fd607000b82e46d98092d1fc14a361

  • Size

    406KB

  • Sample

    250110-mkph6ssjax

  • MD5

    e1fd607000b82e46d98092d1fc14a361

  • SHA1

    1381501276be2ffe523cf147fcd31ec8c1d4ab29

  • SHA256

    5b80ecc3c397944d7271241532164354bdbd479796ce2777822b6850719a3f6f

  • SHA512

    00753ee98b2af3e68a9e3d03b41738fe61c9a22a52d0ba75ac97c216416d159fc78dffb09435011b98641dc1e7ea7caf61070ff64bec0ac19e591e53045963da

  • SSDEEP

    6144:89Ka0kXlt0izuYU13vvbG54WCD/vjx3MN4/QvR6ZaT8MBTH4aZ1JOLlUqK+Wy8:8IaJYvDjWN44ZaI8wTHdxIlt

Malware Config

Extracted

Family

redline

Botnet

NEWPUB1

C2

45.9.20.182:46792

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      JaffaCakes118_e1fd607000b82e46d98092d1fc14a361

    • Size

      406KB

    • MD5

      e1fd607000b82e46d98092d1fc14a361

    • SHA1

      1381501276be2ffe523cf147fcd31ec8c1d4ab29

    • SHA256

      5b80ecc3c397944d7271241532164354bdbd479796ce2777822b6850719a3f6f

    • SHA512

      00753ee98b2af3e68a9e3d03b41738fe61c9a22a52d0ba75ac97c216416d159fc78dffb09435011b98641dc1e7ea7caf61070ff64bec0ac19e591e53045963da

    • SSDEEP

      6144:89Ka0kXlt0izuYU13vvbG54WCD/vjx3MN4/QvR6ZaT8MBTH4aZ1JOLlUqK+Wy8:8IaJYvDjWN44ZaI8wTHdxIlt

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks