General

  • Target

    2269e9421374a2d98c7f69153a5ca647_JaffaCakes118

  • Size

    366KB

  • Sample

    240703-pwejfsvgqh

  • MD5

    2269e9421374a2d98c7f69153a5ca647

  • SHA1

    18a8bf91b7b121b617921ab3e8acf79599a353a0

  • SHA256

    f59e70c1e2703fd8d6016bad2f6b4ebd7824b52eab2bf63a0fdc96f0a3d16011

  • SHA512

    67226e0be2c2b913bc7f2a36ea1afea7afd469ecba4ac2ec7c337918db37d028c664e13c6abd2b6af56ba5f211524942891e9c4de6adb25a8b4adc9b4279ea98

  • SSDEEP

    6144:mV9qgzGpmE2fOz417Fdix5i2jsKcpq7nCwvROhxxpeTr/ekIw:aqgzGwE2fOz4Ux5i2jsKx7Cw0zxp6L

Malware Config

Extracted

Family

redline

Botnet

build

C2

185.244.182.136:51832

Attributes
  • auth_value

    275ce2c87153d4e8e3cc276c686a93de

Targets

    • Target

      2269e9421374a2d98c7f69153a5ca647_JaffaCakes118

    • Size

      366KB

    • MD5

      2269e9421374a2d98c7f69153a5ca647

    • SHA1

      18a8bf91b7b121b617921ab3e8acf79599a353a0

    • SHA256

      f59e70c1e2703fd8d6016bad2f6b4ebd7824b52eab2bf63a0fdc96f0a3d16011

    • SHA512

      67226e0be2c2b913bc7f2a36ea1afea7afd469ecba4ac2ec7c337918db37d028c664e13c6abd2b6af56ba5f211524942891e9c4de6adb25a8b4adc9b4279ea98

    • SSDEEP

      6144:mV9qgzGpmE2fOz417Fdix5i2jsKcpq7nCwvROhxxpeTr/ekIw:aqgzGwE2fOz4Ux5i2jsKx7Cw0zxp6L

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

MITRE ATT&CK Matrix

Tasks