General

  • Target

    JaffaCakes118_f1d5961147378731f63effa7c1f19c40

  • Size

    104KB

  • Sample

    250111-adpjdawraq

  • MD5

    f1d5961147378731f63effa7c1f19c40

  • SHA1

    3b893c54a83ec7b985ed06abf667c4ded12865ad

  • SHA256

    1ef750e56b5287f02e9f7289b8216a7a8de9125f131f76ad4652ea2693c87829

  • SHA512

    30396b363d9fb08fc63cb1cc7eebc890cd384ae20d12b825c8bba32831e3e316071aac9b3810879b962cbfafe5f2177c3448962468ec9bff0bb9868ab03f913d

  • SSDEEP

    3072:eBECs7bLjlp5qjW/uyX/Gk7OlfPR2IJv8D7:FTbLjlp5qjWBvKLqX

Malware Config

Extracted

Family

redline

Botnet

@exs1temq

C2

62.182.156.24:12780

Attributes
  • auth_value

    bb67ccc49d44343128ca161d7fe51029

Targets

    • Target

      JaffaCakes118_f1d5961147378731f63effa7c1f19c40

    • Size

      104KB

    • MD5

      f1d5961147378731f63effa7c1f19c40

    • SHA1

      3b893c54a83ec7b985ed06abf667c4ded12865ad

    • SHA256

      1ef750e56b5287f02e9f7289b8216a7a8de9125f131f76ad4652ea2693c87829

    • SHA512

      30396b363d9fb08fc63cb1cc7eebc890cd384ae20d12b825c8bba32831e3e316071aac9b3810879b962cbfafe5f2177c3448962468ec9bff0bb9868ab03f913d

    • SSDEEP

      3072:eBECs7bLjlp5qjW/uyX/Gk7OlfPR2IJv8D7:FTbLjlp5qjWBvKLqX

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks