General

  • Target
    jaffacakes118_4cc065ceffd686fab78ac7a44ba56f793a6b03170763e50d2a24a750d0f60b93
  • Size 349KB
  • Sample261016-j6md6agf48
  • SHA256 4cc065ceffd686fab78ac7a44ba56f793a6b03170763e50d2a24a750d0f60b93
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • redline

C2
  • 79.137.192.7:39946

Attributes
  • auth_value

    3c6a87acbf167290f22d8730a587b586

Targets

    • Target
      jaffacakes118_4cc065ceffd686fab78ac7a44ba56f793a6b03170763e50d2a24a750d0f60b93
    • Size 349KB
    • SHA256 4cc065ceffd686fab78ac7a44ba56f793a6b03170763e50d2a24a750d0f60b93
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks