General
-
Target
ede690e47cd28b61c55b2a2a59dce3c9_JaffaCakes118
-
Size
290KB
-
Sample
240411-vcaztaba5s
-
MD5
ede690e47cd28b61c55b2a2a59dce3c9
-
SHA1
2531f53b49e637c08f60b286f1b62359e2374c48
-
SHA256
cecc0d25318bfe6b3f927d8ad5304c84e98c29142f243794619e6cb044cd4bb3
-
SHA512
5984f7ba8e57c9f9188337a414c41be1d5672b1667f54bb9176274e51d4d3d462636840aa61d6d9d724bb0e94c81e0c3f02939eaff00c8fde85983cecae1da10
-
SSDEEP
6144:WL7DHlZB6gGLSn5wADB4llzci1mh1llhA:WnDHlZXGLSn5wASrNQFl
Static task
static1
Behavioral task
behavioral1
Sample
ede690e47cd28b61c55b2a2a59dce3c9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ede690e47cd28b61c55b2a2a59dce3c9_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
redline
SewPalpadin
185.215.113.114:8887
Targets
-
-
Target
ede690e47cd28b61c55b2a2a59dce3c9_JaffaCakes118
-
Size
290KB
-
MD5
ede690e47cd28b61c55b2a2a59dce3c9
-
SHA1
2531f53b49e637c08f60b286f1b62359e2374c48
-
SHA256
cecc0d25318bfe6b3f927d8ad5304c84e98c29142f243794619e6cb044cd4bb3
-
SHA512
5984f7ba8e57c9f9188337a414c41be1d5672b1667f54bb9176274e51d4d3d462636840aa61d6d9d724bb0e94c81e0c3f02939eaff00c8fde85983cecae1da10
-
SSDEEP
6144:WL7DHlZB6gGLSn5wADB4llzci1mh1llhA:WnDHlZXGLSn5wASrNQFl
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
SectopRAT payload
-