General

  • Target

    8f24fae4e330e0fc92d6c1e665538d43_JaffaCakes118

  • Size

    322KB

  • Sample

    241104-e1jc4awndq

  • MD5

    8f24fae4e330e0fc92d6c1e665538d43

  • SHA1

    f0904364d2195fa4e05cd51354315935bb1b0ac4

  • SHA256

    1a7b59228eb80c77fbbe268f906dd8452d24750c67cc216ae2b4aead840dd504

  • SHA512

    8b1ead96fc7f5651fa607f9d80d00527fac5e1f1fa618d4cff436e9e45c5d8299b8ca7d9004c03497e46e18778c6b67db938dbe43a9ba759a18ced0bd076aa4f

  • SSDEEP

    6144:1hs4cHdHJMaV2MXMKz+PRyJbOb1d9WWCIwHoLA:Xs40OF+KZs8l9C5ILA

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      8f24fae4e330e0fc92d6c1e665538d43_JaffaCakes118

    • Size

      322KB

    • MD5

      8f24fae4e330e0fc92d6c1e665538d43

    • SHA1

      f0904364d2195fa4e05cd51354315935bb1b0ac4

    • SHA256

      1a7b59228eb80c77fbbe268f906dd8452d24750c67cc216ae2b4aead840dd504

    • SHA512

      8b1ead96fc7f5651fa607f9d80d00527fac5e1f1fa618d4cff436e9e45c5d8299b8ca7d9004c03497e46e18778c6b67db938dbe43a9ba759a18ced0bd076aa4f

    • SSDEEP

      6144:1hs4cHdHJMaV2MXMKz+PRyJbOb1d9WWCIwHoLA:Xs40OF+KZs8l9C5ILA

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks