General
-
Target
f57014ec711002b637697be806394a3c_JaffaCakes118
-
Size
389KB
-
Sample
241215-yaa4kswlfm
-
MD5
f57014ec711002b637697be806394a3c
-
SHA1
bd34d56b9b685e3238552d69a733050268c9a921
-
SHA256
09d58d081dd9364e99857ac273d52a17a0473cc64e64d0e15b2b9b2f67ef2d49
-
SHA512
ed9d6ce7f2da002e409c10f8046d95b69800dfffbc9b8d8805cf26f136849bf471aa8c7fd2d9abecfb80cac8986ba1247ef0ad40bcc33e8e2b7da7245bfb6b0f
-
SSDEEP
12288:sA3AHAI6tB+ysm4T68rbe0fsep3F5OBQTT04:sgI6tBpsmQreC7T04
Static task
static1
Behavioral task
behavioral1
Sample
f57014ec711002b637697be806394a3c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f57014ec711002b637697be806394a3c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
SewPalpadin
185.215.113.114:8887
Targets
-
-
Target
f57014ec711002b637697be806394a3c_JaffaCakes118
-
Size
389KB
-
MD5
f57014ec711002b637697be806394a3c
-
SHA1
bd34d56b9b685e3238552d69a733050268c9a921
-
SHA256
09d58d081dd9364e99857ac273d52a17a0473cc64e64d0e15b2b9b2f67ef2d49
-
SHA512
ed9d6ce7f2da002e409c10f8046d95b69800dfffbc9b8d8805cf26f136849bf471aa8c7fd2d9abecfb80cac8986ba1247ef0ad40bcc33e8e2b7da7245bfb6b0f
-
SSDEEP
12288:sA3AHAI6tB+ysm4T68rbe0fsep3F5OBQTT04:sgI6tBpsmQreC7T04
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
SectopRAT payload
-
Sectoprat family
-