General
-
Target
d518b530f4a66765407f4fa2a8b98678_JaffaCakes118
-
Size
340KB
-
Sample
241208-edb1hawmfr
-
MD5
d518b530f4a66765407f4fa2a8b98678
-
SHA1
5d89afcc878e1e565eab374940408fce7e5ae968
-
SHA256
b821da19f3f294e14b95e0a9c2b2926fbac983986494e81278ba4d3b7c5502a4
-
SHA512
8564107f1cf84951bfa6caf38cc95fadb0e1580c0cbec709fa8766c61e4e6b562bb234754e2b947f78052eab7e0698535828345e4295404d2ffeb33648515f21
-
SSDEEP
6144:sA9GNizFTeIHaW0DSyh40Qvd20ilsv/KMmpY5yM2pWc9/Vvc:dGQzFTdHaW0HQL6S/WpJJpWutvc
Static task
static1
Behavioral task
behavioral1
Sample
d518b530f4a66765407f4fa2a8b98678_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d518b530f4a66765407f4fa2a8b98678_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
SewPalpadin
185.215.113.114:8887
Targets
-
-
Target
d518b530f4a66765407f4fa2a8b98678_JaffaCakes118
-
Size
340KB
-
MD5
d518b530f4a66765407f4fa2a8b98678
-
SHA1
5d89afcc878e1e565eab374940408fce7e5ae968
-
SHA256
b821da19f3f294e14b95e0a9c2b2926fbac983986494e81278ba4d3b7c5502a4
-
SHA512
8564107f1cf84951bfa6caf38cc95fadb0e1580c0cbec709fa8766c61e4e6b562bb234754e2b947f78052eab7e0698535828345e4295404d2ffeb33648515f21
-
SSDEEP
6144:sA9GNizFTeIHaW0DSyh40Qvd20ilsv/KMmpY5yM2pWc9/Vvc:dGQzFTdHaW0HQL6S/WpJJpWutvc
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
SectopRAT payload
-
Sectoprat family
-