General

  • Target

    d60de31e6e431d66634f84ef0ee29f37_JaffaCakes118

  • Size

    278KB

  • Sample

    241208-jz6jfsxra1

  • MD5

    d60de31e6e431d66634f84ef0ee29f37

  • SHA1

    9f5a661a0c42c093775c1e4c9e76fdeafcca3010

  • SHA256

    5f813f5fd0f6245500bda8b4df4649810ae1c51bb07ee10e12d19388adab1fb4

  • SHA512

    4aeba8436507283a90a7c3430031385a088cce4e4d2dcabb84128a575316e40b6df6a5407e6af2dda8fc11c1a719ec083616b90a90ecd04eb03f8d377114544f

  • SSDEEP

    6144:WLumndWPXsJ3VgDq1tdWhASPFpWOROyR4MWiheCi:W6YqI3VgDwjOAMTWOHORihri

Malware Config

Extracted

Family

redline

Botnet

MIX 14.08

C2

185.215.113.17:18597

Targets

    • Target

      d60de31e6e431d66634f84ef0ee29f37_JaffaCakes118

    • Size

      278KB

    • MD5

      d60de31e6e431d66634f84ef0ee29f37

    • SHA1

      9f5a661a0c42c093775c1e4c9e76fdeafcca3010

    • SHA256

      5f813f5fd0f6245500bda8b4df4649810ae1c51bb07ee10e12d19388adab1fb4

    • SHA512

      4aeba8436507283a90a7c3430031385a088cce4e4d2dcabb84128a575316e40b6df6a5407e6af2dda8fc11c1a719ec083616b90a90ecd04eb03f8d377114544f

    • SSDEEP

      6144:WLumndWPXsJ3VgDq1tdWhASPFpWOROyR4MWiheCi:W6YqI3VgDwjOAMTWOHORihri

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks