General

  • Target

    JaffaCakes118_fa1487e24cbe77d753ae29386a4517ca

  • Size

    420KB

  • Sample

    250111-hnxxhazkd1

  • MD5

    fa1487e24cbe77d753ae29386a4517ca

  • SHA1

    392ab346b3fdf56a155d8d3fc12b2b08614c6814

  • SHA256

    569a180ba35ff0e22845237e9e77c25a8607b89bc956647438200dca7ad9841b

  • SHA512

    93de96ab92c22743207d1fc7ca39917d83018729675682879af745d2b58db578d8da090abcb4a5f54b90407afa4fd60c6985bfbff73ca6c9bff0c3ebf2f60ef9

  • SSDEEP

    12288:K68JoaMZIzBC3t0KJIOEIU9KdYfvyIvXCosu:xnaMZIzg/3URfvrSg

Malware Config

Extracted

Family

redline

Botnet

5

C2

80.87.192.249:16640

Attributes
  • auth_value

    3e4c638c72124e45bcf5164456741cce

Targets

    • Target

      JaffaCakes118_fa1487e24cbe77d753ae29386a4517ca

    • Size

      420KB

    • MD5

      fa1487e24cbe77d753ae29386a4517ca

    • SHA1

      392ab346b3fdf56a155d8d3fc12b2b08614c6814

    • SHA256

      569a180ba35ff0e22845237e9e77c25a8607b89bc956647438200dca7ad9841b

    • SHA512

      93de96ab92c22743207d1fc7ca39917d83018729675682879af745d2b58db578d8da090abcb4a5f54b90407afa4fd60c6985bfbff73ca6c9bff0c3ebf2f60ef9

    • SSDEEP

      12288:K68JoaMZIzBC3t0KJIOEIU9KdYfvyIvXCosu:xnaMZIzg/3URfvrSg

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks