General
-
Target
ca32b659715b24336f375cfdffcde316_JaffaCakes118
-
Size
417KB
-
Sample
240405-ejnaqabe6y
-
MD5
ca32b659715b24336f375cfdffcde316
-
SHA1
541c200a5363601b9312e8645b3605555f23ac8e
-
SHA256
7f99d4d34c01c930061e3ad900ebfee6ddb5e183546a07c89352f4794be33f46
-
SHA512
6ca33d37f970f40c0062b9e0e25b25086b4fe9cd634be902df060762262849d6c57a9a6247b1f929857aff07c5c687a45b6837abb0eaf04087a8e20faa565c4b
-
SSDEEP
6144:P4zztDafOD6tCcjWJbDdOfNNhImKV4qA5sppdWyy4ssiY6ySGjUa85T:PwBDuB3SchIDV9AyfdWyy4sQ6TGjA5T
Static task
static1
Behavioral task
behavioral1
Sample
ca32b659715b24336f375cfdffcde316_JaffaCakes118.exe
Resource
win7-20240319-en
Malware Config
Extracted
redline
PUB
45.9.20.182:52236
-
auth_value
a272f3a2850ec3dccdaed97234b7c40e
Targets
-
-
Target
ca32b659715b24336f375cfdffcde316_JaffaCakes118
-
Size
417KB
-
MD5
ca32b659715b24336f375cfdffcde316
-
SHA1
541c200a5363601b9312e8645b3605555f23ac8e
-
SHA256
7f99d4d34c01c930061e3ad900ebfee6ddb5e183546a07c89352f4794be33f46
-
SHA512
6ca33d37f970f40c0062b9e0e25b25086b4fe9cd634be902df060762262849d6c57a9a6247b1f929857aff07c5c687a45b6837abb0eaf04087a8e20faa565c4b
-
SSDEEP
6144:P4zztDafOD6tCcjWJbDdOfNNhImKV4qA5sppdWyy4ssiY6ySGjUa85T:PwBDuB3SchIDV9AyfdWyy4sQ6TGjA5T
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
SectopRAT payload
-