General
-
Target
e4f0eb52a38d84dd15ec78e8bf9f0ce6_JaffaCakes118
-
Size
386KB
-
Sample
240407-ptf99scg6s
-
MD5
e4f0eb52a38d84dd15ec78e8bf9f0ce6
-
SHA1
d54fd85eb9717dd180a9f4ba1ae50516345ea36c
-
SHA256
1fb9fe7aa7dad77120171c9eb088d6d2988356308940996a27205b37808494a7
-
SHA512
46e374b4fbf79e4ad8a21238e77e975803d4bfa23f47ec14dd42b1a203a7bc0f24033e88993a42fc15588783683119362fbcf549f7246a31edc181b0e7fc8612
-
SSDEEP
6144:pVQvybiNTUc6D9XWWdbdVO1vLWHADAzPbuWrormRrhpOCE2:8IiNg59XWmVKzOVzPbuYRdgb2
Static task
static1
Behavioral task
behavioral1
Sample
e4f0eb52a38d84dd15ec78e8bf9f0ce6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e4f0eb52a38d84dd15ec78e8bf9f0ce6_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
redline
SewPalpadin
185.215.113.114:8887
Targets
-
-
Target
e4f0eb52a38d84dd15ec78e8bf9f0ce6_JaffaCakes118
-
Size
386KB
-
MD5
e4f0eb52a38d84dd15ec78e8bf9f0ce6
-
SHA1
d54fd85eb9717dd180a9f4ba1ae50516345ea36c
-
SHA256
1fb9fe7aa7dad77120171c9eb088d6d2988356308940996a27205b37808494a7
-
SHA512
46e374b4fbf79e4ad8a21238e77e975803d4bfa23f47ec14dd42b1a203a7bc0f24033e88993a42fc15588783683119362fbcf549f7246a31edc181b0e7fc8612
-
SSDEEP
6144:pVQvybiNTUc6D9XWWdbdVO1vLWHADAzPbuWrormRrhpOCE2:8IiNg59XWmVKzOVzPbuYRdgb2
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
SectopRAT payload
-