General

  • Target

    JaffaCakes118_fef6f262a31f3aa1d45c1281438ef29e

  • Size

    102KB

  • Sample

    250111-mplm3swrbs

  • MD5

    fef6f262a31f3aa1d45c1281438ef29e

  • SHA1

    51fb81a3b7059c018155624f3faf6be7353b2b5b

  • SHA256

    a442274615b1f266c4163c50b05d6a43794afb6851e87bd63203bb2a64784c4d

  • SHA512

    3d3e121d4501722b8df31ce59334705c59702e9555373719af3d9a878ec565cbdec6767fbc606a1f904c6310d6b587033aa15a063d66d4397cb0dd45d4082b8c

  • SSDEEP

    1536:XXLrP/yPETsRGOPa3qDwGjhQxSRi4ymOGNiTaC5bM6CkJnjv0aKl0rfqrbhZ3f:XXLePETmPHDwsw2N2phek1rZrGbhZ3f

Malware Config

Extracted

Family

redline

Botnet

@Spoon_machine606060

C2

62.182.156.24:12780

Attributes
  • auth_value

    bb67ccc49d44343128ca161d7fe51029

Targets

    • Target

      JaffaCakes118_fef6f262a31f3aa1d45c1281438ef29e

    • Size

      102KB

    • MD5

      fef6f262a31f3aa1d45c1281438ef29e

    • SHA1

      51fb81a3b7059c018155624f3faf6be7353b2b5b

    • SHA256

      a442274615b1f266c4163c50b05d6a43794afb6851e87bd63203bb2a64784c4d

    • SHA512

      3d3e121d4501722b8df31ce59334705c59702e9555373719af3d9a878ec565cbdec6767fbc606a1f904c6310d6b587033aa15a063d66d4397cb0dd45d4082b8c

    • SSDEEP

      1536:XXLrP/yPETsRGOPa3qDwGjhQxSRi4ymOGNiTaC5bM6CkJnjv0aKl0rfqrbhZ3f:XXLePETmPHDwsw2N2phek1rZrGbhZ3f

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks