General
-
Target
f813f29dd739eb5042e19a299ad40d65_JaffaCakes118
-
Size
354KB
-
Sample
240418-qkssdafc8x
-
MD5
f813f29dd739eb5042e19a299ad40d65
-
SHA1
2cf59d8bff18e432a2d305ce2b3d550e07011329
-
SHA256
04223616f8b16d27ee61dc31401c325a89835f35f7700f3e2ed3350269832758
-
SHA512
871260dcaf1c85ff699a9a74416871f0c34e1e53741ada07d316e34eafe6e6f2caf7ad5d49d16ec985a6cf597175cb9d2e6fc78457cccc8b1ee208e7ce81f779
-
SSDEEP
6144:dQ3iJhbH31Zu9lvsWcbtsVH56yBBrcb4xoV+a9vDz1BnYJuphiqQR7Y:dycJH31Zu96WchsVZzrckoDbz19CIhiu
Static task
static1
Behavioral task
behavioral1
Sample
f813f29dd739eb5042e19a299ad40d65_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
redline
paladin
178.63.26.132:29795
Targets
-
-
Target
f813f29dd739eb5042e19a299ad40d65_JaffaCakes118
-
Size
354KB
-
MD5
f813f29dd739eb5042e19a299ad40d65
-
SHA1
2cf59d8bff18e432a2d305ce2b3d550e07011329
-
SHA256
04223616f8b16d27ee61dc31401c325a89835f35f7700f3e2ed3350269832758
-
SHA512
871260dcaf1c85ff699a9a74416871f0c34e1e53741ada07d316e34eafe6e6f2caf7ad5d49d16ec985a6cf597175cb9d2e6fc78457cccc8b1ee208e7ce81f779
-
SSDEEP
6144:dQ3iJhbH31Zu9lvsWcbtsVH56yBBrcb4xoV+a9vDz1BnYJuphiqQR7Y:dycJH31Zu96WchsVZzrckoDbz19CIhiu
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
SectopRAT payload
-