Overview

overview

10

Static

static

3

1e8038f44a...18.exe

windows7-x64

10

1e8038f44a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1e8038f44a5872974a95216707bb8448_JaffaCakes118

  • Size

    934KB

  • Sample

    240702-jjjprawfpm

  • MD5

    1e8038f44a5872974a95216707bb8448

  • SHA1

    29c5bfdef13e56ce6d05c2aec2df73cb56ff297e

  • SHA256

    e5dbec0ed3e798e3be3273b2a2006820b5d477ea525e030069bc8317cb2c697e

  • SHA512

    bdbf82a7868fbc514c2beecc496c199599a57261a223fc5d79f954f130702a43346dc55e6aa44424228a15ede9c32aaceca2c4e9f9bcb5d45242376fbaaf3f45

  • SSDEEP

    12288:a5u6Wm2nwImWsnB2jTxOus5erm1tH1FW0rVv181Zfhvc:a5u6WFw97Td5erEtHHW0Vye

Score
10/10
redlinebuild 4infostealer

Malware Config

Extracted

Family

redline

Botnet

Build 4

C2

80.89.224.252:3214

Targets

    • Target

      1e8038f44a5872974a95216707bb8448_JaffaCakes118

    • Size

      934KB

    • MD5

      1e8038f44a5872974a95216707bb8448

    • SHA1

      29c5bfdef13e56ce6d05c2aec2df73cb56ff297e

    • SHA256

      e5dbec0ed3e798e3be3273b2a2006820b5d477ea525e030069bc8317cb2c697e

    • SHA512

      bdbf82a7868fbc514c2beecc496c199599a57261a223fc5d79f954f130702a43346dc55e6aa44424228a15ede9c32aaceca2c4e9f9bcb5d45242376fbaaf3f45

    • SSDEEP

      12288:a5u6Wm2nwImWsnB2jTxOus5erm1tH1FW0rVv181Zfhvc:a5u6WFw97Td5erEtHHW0Vye

    Score
    10/10
    redlinebuild 4infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks