General
-
Target
adf176c453f3e41fa05ee104d85a3090_JaffaCakes118
-
Size
387KB
-
Sample
240404-dnbxtade84
-
MD5
adf176c453f3e41fa05ee104d85a3090
-
SHA1
42aa1b7ee4d8ebabc99e44d029230637d47c1013
-
SHA256
a1c2a8d328a756b25f0f871843dd68cf12f266291f9764523d9ed1d909e43a22
-
SHA512
009ac1ab669a33fd7bfa25bcba763bacfa46206e6b9c0a9159f4db33970625554cfe8e4d396cdacbad11a3f9cc0597f27af6eccc06e9ce9df7920996d6290d33
-
SSDEEP
6144:SspugGMEfQlpQRpl1RuP2I1kzDGeIg/rgkNEjpByT8WcrgaxHUHmWl:bZGMucQzdpqevdmjpByT0rgadsl
Static task
static1
Behavioral task
behavioral1
Sample
adf176c453f3e41fa05ee104d85a3090_JaffaCakes118.exe
Resource
win7-20231129-en
Malware Config
Extracted
redline
paladin
37.228.129.48:29795
-
auth_value
f27db372188045eefdf974196ead3dae
Targets
-
-
Target
adf176c453f3e41fa05ee104d85a3090_JaffaCakes118
-
Size
387KB
-
MD5
adf176c453f3e41fa05ee104d85a3090
-
SHA1
42aa1b7ee4d8ebabc99e44d029230637d47c1013
-
SHA256
a1c2a8d328a756b25f0f871843dd68cf12f266291f9764523d9ed1d909e43a22
-
SHA512
009ac1ab669a33fd7bfa25bcba763bacfa46206e6b9c0a9159f4db33970625554cfe8e4d396cdacbad11a3f9cc0597f27af6eccc06e9ce9df7920996d6290d33
-
SSDEEP
6144:SspugGMEfQlpQRpl1RuP2I1kzDGeIg/rgkNEjpByT8WcrgaxHUHmWl:bZGMucQzdpqevdmjpByT0rgadsl
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
SectopRAT payload
-