General
-
Target
d05c1aa16e99fb31739257b6cdec229b_JaffaCakes118
-
Size
385KB
-
Sample
240405-lt6y5sgh31
-
MD5
d05c1aa16e99fb31739257b6cdec229b
-
SHA1
c950a6b47492d0128a197f8e72cf86e94a9b70d4
-
SHA256
faf0657a5febd4dcbec532ce86d4404fd9b2970189e5f8cb6dbfcbb59833f072
-
SHA512
e30606bd3784b480942e5561e1f0c590cddb444f4d5284408de00b23dab0e1807966b7532ef9390a0e84776fd3bca9bde075f618e5fc4d5ce2e58115a8380092
-
SSDEEP
6144:7gcwElSri+TxjPhNHbv+7GD5vQyZbnvCRPI9LAN89H60NB:73wEoG+9jLbvDD54UnvV9L+88E
Static task
static1
Behavioral task
behavioral1
Sample
d05c1aa16e99fb31739257b6cdec229b_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
redline
build
77.232.40.127:8204
-
auth_value
275ce2c87153d4e8e3cc276c686a93de
Targets
-
-
Target
d05c1aa16e99fb31739257b6cdec229b_JaffaCakes118
-
Size
385KB
-
MD5
d05c1aa16e99fb31739257b6cdec229b
-
SHA1
c950a6b47492d0128a197f8e72cf86e94a9b70d4
-
SHA256
faf0657a5febd4dcbec532ce86d4404fd9b2970189e5f8cb6dbfcbb59833f072
-
SHA512
e30606bd3784b480942e5561e1f0c590cddb444f4d5284408de00b23dab0e1807966b7532ef9390a0e84776fd3bca9bde075f618e5fc4d5ce2e58115a8380092
-
SSDEEP
6144:7gcwElSri+TxjPhNHbv+7GD5vQyZbnvCRPI9LAN89H60NB:73wEoG+9jLbvDD54UnvV9L+88E
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
SectopRAT payload
-