General

  • Target

    edef90f8d9a6fd3bc830c8159e2e6136_JaffaCakes118

  • Size

    136KB

  • Sample

    241214-kk4a8awqhz

  • MD5

    edef90f8d9a6fd3bc830c8159e2e6136

  • SHA1

    02bf4a16ec020e2eb3450f1c0cfd5ef139e5044a

  • SHA256

    952810f433b79c29d51b5c585709bf704e59550a8a437cf7316c4d2af213e86e

  • SHA512

    c710d72aa6ef62cadabe0e14b90f3b3567c0c70ad216ecd73e24333ec5753a77990372689f30264a956876f531c802c8e609ce169c5ad5c8899d113303d024d5

  • SSDEEP

    3072:jMEKgCmrrVJJn5XHycFB/Cms9UhQ8h6+xya+zQz:jhrRJ5AcFMUJxya5

Malware Config

Targets

    • Target

      edef90f8d9a6fd3bc830c8159e2e6136_JaffaCakes118

    • Size

      136KB

    • MD5

      edef90f8d9a6fd3bc830c8159e2e6136

    • SHA1

      02bf4a16ec020e2eb3450f1c0cfd5ef139e5044a

    • SHA256

      952810f433b79c29d51b5c585709bf704e59550a8a437cf7316c4d2af213e86e

    • SHA512

      c710d72aa6ef62cadabe0e14b90f3b3567c0c70ad216ecd73e24333ec5753a77990372689f30264a956876f531c802c8e609ce169c5ad5c8899d113303d024d5

    • SSDEEP

      3072:jMEKgCmrrVJJn5XHycFB/Cms9UhQ8h6+xya+zQz:jhrRJ5AcFMUJxya5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks