General

  • Target

    bb2cd9052b7b7a67e468e9c3060e3811_JaffaCakes118

  • Size

    307KB

  • Sample

    241203-b82ymatmgv

  • MD5

    bb2cd9052b7b7a67e468e9c3060e3811

  • SHA1

    85eebf458f873751665c515c631cb9bc32beeb0d

  • SHA256

    f195f7b99504bb3d899974b42440844a50d0d2982ba3ae58f4f163c06cf8cb94

  • SHA512

    82d186b195b4f40464efd4299e5fe6e5732dd729d6c7f5b50b9c951bc8c1dd61f218cc8bbf36fd0047a0aef1cd74adac3c233f9e6ad419011839232c253eab3d

  • SSDEEP

    6144:8q13Gg7rjzkd1IvDZO/zzf4bEH/rRgWjTwa/RxJg:8E2Ijk+vlO/ftRDY

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      bb2cd9052b7b7a67e468e9c3060e3811_JaffaCakes118

    • Size

      307KB

    • MD5

      bb2cd9052b7b7a67e468e9c3060e3811

    • SHA1

      85eebf458f873751665c515c631cb9bc32beeb0d

    • SHA256

      f195f7b99504bb3d899974b42440844a50d0d2982ba3ae58f4f163c06cf8cb94

    • SHA512

      82d186b195b4f40464efd4299e5fe6e5732dd729d6c7f5b50b9c951bc8c1dd61f218cc8bbf36fd0047a0aef1cd74adac3c233f9e6ad419011839232c253eab3d

    • SSDEEP

      6144:8q13Gg7rjzkd1IvDZO/zzf4bEH/rRgWjTwa/RxJg:8E2Ijk+vlO/ftRDY

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks