General
-
Target
ef84d3be5dceecc53116942e3d1e3bc1_JaffaCakes118
-
Size
104KB
-
Sample
240414-z18yzadf92
-
MD5
ef84d3be5dceecc53116942e3d1e3bc1
-
SHA1
4fef8e0a14cb2e80f796fc34e1db65c3d061859f
-
SHA256
ff75a4f5148614f8c1ef4c86f8d0febf4a1ac1e8d34bb51bb14d5e4fef28cc2d
-
SHA512
feb064f9b579a10899d61fde1f68b50e22069bee535f898c435aca52be317cf11f4f0019c86b4f6fa3350bd5b312f2f7e6740357102e8317b42256706c43ff32
-
SSDEEP
3072:bXqPF3ioZsIPoOjF1FfbmXhTi0ymd/AApeb:OP5bmRTTyMH
Behavioral task
behavioral1
Sample
ef84d3be5dceecc53116942e3d1e3bc1_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
redline
@lopikskk
45.137.190.170:19896
Targets
-
-
Target
ef84d3be5dceecc53116942e3d1e3bc1_JaffaCakes118
-
Size
104KB
-
MD5
ef84d3be5dceecc53116942e3d1e3bc1
-
SHA1
4fef8e0a14cb2e80f796fc34e1db65c3d061859f
-
SHA256
ff75a4f5148614f8c1ef4c86f8d0febf4a1ac1e8d34bb51bb14d5e4fef28cc2d
-
SHA512
feb064f9b579a10899d61fde1f68b50e22069bee535f898c435aca52be317cf11f4f0019c86b4f6fa3350bd5b312f2f7e6740357102e8317b42256706c43ff32
-
SSDEEP
3072:bXqPF3ioZsIPoOjF1FfbmXhTi0ymd/AApeb:OP5bmRTTyMH
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
SectopRAT payload
-