General

  • Target

    98825b7ba5a4fd5a50393537ce827437_JaffaCakes118

  • Size

    275KB

  • Sample

    241125-cble2sxnhk

  • MD5

    98825b7ba5a4fd5a50393537ce827437

  • SHA1

    95e29fe65f893ba4c263780119b830e61771e9b4

  • SHA256

    1a652b9b6a99b969ddf758d3af5873e5e4746b4722af8560ba9f4599b0e58437

  • SHA512

    3748c5c772e08c50939d251fff8a9115a26f8f027ebf544a74a510e0fe13e0710a2479b8bc514bcdd67bfcae05dde1fc547033e26a2cea84b57c29d654c7223e

  • SSDEEP

    6144:W409ueWdkfTI28ILe+6afSRarRgpwzxJg:WUdkLXG+6WCsRGeY

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      98825b7ba5a4fd5a50393537ce827437_JaffaCakes118

    • Size

      275KB

    • MD5

      98825b7ba5a4fd5a50393537ce827437

    • SHA1

      95e29fe65f893ba4c263780119b830e61771e9b4

    • SHA256

      1a652b9b6a99b969ddf758d3af5873e5e4746b4722af8560ba9f4599b0e58437

    • SHA512

      3748c5c772e08c50939d251fff8a9115a26f8f027ebf544a74a510e0fe13e0710a2479b8bc514bcdd67bfcae05dde1fc547033e26a2cea84b57c29d654c7223e

    • SSDEEP

      6144:W409ueWdkfTI28ILe+6afSRarRgpwzxJg:WUdkLXG+6WCsRGeY

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks