General

  • Target

    d7ebc1193dae6cb66f6675590aa1c7db_JaffaCakes118

  • Size

    95KB

  • Sample

    241208-tqflsaymat

  • MD5

    d7ebc1193dae6cb66f6675590aa1c7db

  • SHA1

    b1b38a504ca59702357155896d09dfa3c0dd8cd9

  • SHA256

    bf5cdc78078f0d5ff6dbbc70986be65ec8added8aa324a5887c9b94799b01b75

  • SHA512

    acd821e750c3c39f77ad2e63cd353bd1911f6653a9180397ebcf498d38c60bd8318779c1fd0a1d43eba7323408859a738202d30fa752d46fd0b25b87ae11155f

  • SSDEEP

    1536:scdIy9htWR5qV3BamzEt1EEOGb4pQ33HboyFXdUg36Kx/SEjG6aK:scWsh0L6Ramzyhx3H8yRd1Fp

Malware Config

Extracted

Family

redline

Botnet

ads7

C2

22231jssdszs.fun:80

Targets

    • Target

      d7ebc1193dae6cb66f6675590aa1c7db_JaffaCakes118

    • Size

      95KB

    • MD5

      d7ebc1193dae6cb66f6675590aa1c7db

    • SHA1

      b1b38a504ca59702357155896d09dfa3c0dd8cd9

    • SHA256

      bf5cdc78078f0d5ff6dbbc70986be65ec8added8aa324a5887c9b94799b01b75

    • SHA512

      acd821e750c3c39f77ad2e63cd353bd1911f6653a9180397ebcf498d38c60bd8318779c1fd0a1d43eba7323408859a738202d30fa752d46fd0b25b87ae11155f

    • SSDEEP

      1536:scdIy9htWR5qV3BamzEt1EEOGb4pQ33HboyFXdUg36Kx/SEjG6aK:scWsh0L6Ramzyhx3H8yRd1Fp

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks