General
-
Target
b51da338fc5e8c127c48bf3d9bcc9ca1_JaffaCakes118
-
Size
430KB
-
Sample
241130-gsvgha1jel
-
MD5
b51da338fc5e8c127c48bf3d9bcc9ca1
-
SHA1
4698c9c583278f3273749f2e55e3a3055e1a04ab
-
SHA256
371827d3309f0b2bff933583e4b4ab2150c6e40c6396e66b3e029a1ec97c99de
-
SHA512
0b3912906d19d69a5e28c32c6b1198030be0a39258bdc8eb87e3db62dc7705834a65eaa01fa8b001b73204f984fddfa96519ddbad07b5098b23997d2132e8f20
-
SSDEEP
6144:C/E2vtp+xTTlV+ugB8TkMXakryKKCZ0qRuqlhysMUNeqan0EX7vVXT/LzQ:Cvtc9iugB81XXrySfhon0k9zQ
Static task
static1
Behavioral task
behavioral1
Sample
b51da338fc5e8c127c48bf3d9bcc9ca1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b51da338fc5e8c127c48bf3d9bcc9ca1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
SewPalpadin
185.215.113.114:8887
Targets
-
-
Target
b51da338fc5e8c127c48bf3d9bcc9ca1_JaffaCakes118
-
Size
430KB
-
MD5
b51da338fc5e8c127c48bf3d9bcc9ca1
-
SHA1
4698c9c583278f3273749f2e55e3a3055e1a04ab
-
SHA256
371827d3309f0b2bff933583e4b4ab2150c6e40c6396e66b3e029a1ec97c99de
-
SHA512
0b3912906d19d69a5e28c32c6b1198030be0a39258bdc8eb87e3db62dc7705834a65eaa01fa8b001b73204f984fddfa96519ddbad07b5098b23997d2132e8f20
-
SSDEEP
6144:C/E2vtp+xTTlV+ugB8TkMXakryKKCZ0qRuqlhysMUNeqan0EX7vVXT/LzQ:Cvtc9iugB81XXrySfhon0k9zQ
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
SectopRAT payload
-
Sectoprat family
-