General

  • Target

    51f8b7b55234db37cefe5c33b645008f_JaffaCakes118

  • Size

    343KB

  • Sample

    240717-h56kzatcrd

  • MD5

    51f8b7b55234db37cefe5c33b645008f

  • SHA1

    6a781b9a2f7f5a2ebbfd4fcdb12911388e537186

  • SHA256

    594b5955f84abf202d9ddf5d9f084987bd64c89599d7da5afcab5981db358a49

  • SHA512

    9d4efd5247ceb32c664daea3fa182d087cff7ca89160639e11413cb0247c6be9a1a449a6e847200a472a48bf9fa6c0725a3a50a5b1b83b1b1746ef2b36a20656

  • SSDEEP

    6144:m6V3BHZUlb5xgTvRmNnP0WTng3EPez0AYpL+Bnn:m6V3PU55xgTvRynPhng0PezRML+Bn

Malware Config

Extracted

Family

redline

C2

141.94.188.138:46419

Targets

    • Target

      51f8b7b55234db37cefe5c33b645008f_JaffaCakes118

    • Size

      343KB

    • MD5

      51f8b7b55234db37cefe5c33b645008f

    • SHA1

      6a781b9a2f7f5a2ebbfd4fcdb12911388e537186

    • SHA256

      594b5955f84abf202d9ddf5d9f084987bd64c89599d7da5afcab5981db358a49

    • SHA512

      9d4efd5247ceb32c664daea3fa182d087cff7ca89160639e11413cb0247c6be9a1a449a6e847200a472a48bf9fa6c0725a3a50a5b1b83b1b1746ef2b36a20656

    • SSDEEP

      6144:m6V3BHZUlb5xgTvRmNnP0WTng3EPez0AYpL+Bnn:m6V3PU55xgTvRynPhng0PezRML+Bn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

MITRE ATT&CK Matrix

Tasks