General

  • Target

    ac435b8dcf34732eb62503e6ff730eec_JaffaCakes118

  • Size

    222KB

  • Sample

    241128-pastysxjet

  • MD5

    ac435b8dcf34732eb62503e6ff730eec

  • SHA1

    d7a9f8cd043844c8ab5ca3b22efe4822966fe131

  • SHA256

    0e15e2b38f525de912fc28f702ec29699c9260e63f17fcfd1c3efe2028983c2b

  • SHA512

    4de871a955061b8dabf378cf2ecad8aa645de324228ce66705d493eb426d6031bdc4f3c9063bf16fb5790a4d20639b18da889a7ab7bc6c670ec928698e1ec00c

  • SSDEEP

    3072:8iYCA41upi0bC1myawuEe9FpUcI0oXXzm5TWzOkUru95/koXI44GFsCVncQ:pYti0W4yEEe9jUcInVCkUC9ZkyI4t2

Malware Config

Targets

    • Target

      ac435b8dcf34732eb62503e6ff730eec_JaffaCakes118

    • Size

      222KB

    • MD5

      ac435b8dcf34732eb62503e6ff730eec

    • SHA1

      d7a9f8cd043844c8ab5ca3b22efe4822966fe131

    • SHA256

      0e15e2b38f525de912fc28f702ec29699c9260e63f17fcfd1c3efe2028983c2b

    • SHA512

      4de871a955061b8dabf378cf2ecad8aa645de324228ce66705d493eb426d6031bdc4f3c9063bf16fb5790a4d20639b18da889a7ab7bc6c670ec928698e1ec00c

    • SSDEEP

      3072:8iYCA41upi0bC1myawuEe9FpUcI0oXXzm5TWzOkUru95/koXI44GFsCVncQ:pYti0W4yEEe9jUcInVCkUC9ZkyI4t2

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks