General
-
Target
bf93f16d649dbccb17890b69d8727834_JaffaCakes118
-
Size
306KB
-
Sample
241203-2ntdvstnaj
-
MD5
bf93f16d649dbccb17890b69d8727834
-
SHA1
103df22de84c0b6ab80e4208d92d472e63cf541a
-
SHA256
efc4a59f2a449c089d44667e3d48f81d99e328c307e30a0cfa8fe177041701a6
-
SHA512
80de23e9c9b6af0e75e0d77e06359d752c283604dbb11978963f11e1638162165476e5d81dc8cbd52dbbcb4898eda4484f9a93b290d233b7510741fbebbc4be2
-
SSDEEP
6144:GIe5PYjnZDGffriOJrQMUYWMFnVeFGEqWtycrRgWjTwa/RxJg:GOjnZDgfriMUsRjEqWZR/Y
Static task
static1
Behavioral task
behavioral1
Sample
bf93f16d649dbccb17890b69d8727834_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bf93f16d649dbccb17890b69d8727834_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
SewPalpadin
185.215.113.114:8887
Targets
-
-
Target
bf93f16d649dbccb17890b69d8727834_JaffaCakes118
-
Size
306KB
-
MD5
bf93f16d649dbccb17890b69d8727834
-
SHA1
103df22de84c0b6ab80e4208d92d472e63cf541a
-
SHA256
efc4a59f2a449c089d44667e3d48f81d99e328c307e30a0cfa8fe177041701a6
-
SHA512
80de23e9c9b6af0e75e0d77e06359d752c283604dbb11978963f11e1638162165476e5d81dc8cbd52dbbcb4898eda4484f9a93b290d233b7510741fbebbc4be2
-
SSDEEP
6144:GIe5PYjnZDGffriOJrQMUYWMFnVeFGEqWtycrRgWjTwa/RxJg:GOjnZDgfriMUsRjEqWZR/Y
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
SectopRAT payload
-
Sectoprat family
-