General

  • Target

    d518b530f4a66765407f4fa2a8b98678_JaffaCakes118

  • Size

    340KB

  • Sample

    241208-edb1hawmfr

  • MD5

    d518b530f4a66765407f4fa2a8b98678

  • SHA1

    5d89afcc878e1e565eab374940408fce7e5ae968

  • SHA256

    b821da19f3f294e14b95e0a9c2b2926fbac983986494e81278ba4d3b7c5502a4

  • SHA512

    8564107f1cf84951bfa6caf38cc95fadb0e1580c0cbec709fa8766c61e4e6b562bb234754e2b947f78052eab7e0698535828345e4295404d2ffeb33648515f21

  • SSDEEP

    6144:sA9GNizFTeIHaW0DSyh40Qvd20ilsv/KMmpY5yM2pWc9/Vvc:dGQzFTdHaW0HQL6S/WpJJpWutvc

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      d518b530f4a66765407f4fa2a8b98678_JaffaCakes118

    • Size

      340KB

    • MD5

      d518b530f4a66765407f4fa2a8b98678

    • SHA1

      5d89afcc878e1e565eab374940408fce7e5ae968

    • SHA256

      b821da19f3f294e14b95e0a9c2b2926fbac983986494e81278ba4d3b7c5502a4

    • SHA512

      8564107f1cf84951bfa6caf38cc95fadb0e1580c0cbec709fa8766c61e4e6b562bb234754e2b947f78052eab7e0698535828345e4295404d2ffeb33648515f21

    • SSDEEP

      6144:sA9GNizFTeIHaW0DSyh40Qvd20ilsv/KMmpY5yM2pWc9/Vvc:dGQzFTdHaW0HQL6S/WpJJpWutvc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks