General

  • Target

    fa415bd1a6cda910d5c35d3c6800c9f8_JaffaCakes118

  • Size

    345KB

  • Sample

    241218-fzjsxavlez

  • MD5

    fa415bd1a6cda910d5c35d3c6800c9f8

  • SHA1

    3a192c231530b9518ac5cdfb55942688f39f0424

  • SHA256

    5cdac84f4aabb64ea234ea303644a9a56232d3c6cef043955de0bbf911822ded

  • SHA512

    dd91d21be24470ca492f26495911c5b6a5cc255684bbf6e0b31b91782bbf0f50ea795b2bdfcac64b494ec7f615dcca99f1a810d8fb852a96ab2c9b63b42a46d0

  • SSDEEP

    6144:ibcAgd8n9LQchnwtyvIQCIbw43jelRW9mpH4:ibcAgKnZQchnw3QCUw43jewmpY

Malware Config

Extracted

Family

redline

C2

141.94.188.138:46419

Targets

    • Target

      fa415bd1a6cda910d5c35d3c6800c9f8_JaffaCakes118

    • Size

      345KB

    • MD5

      fa415bd1a6cda910d5c35d3c6800c9f8

    • SHA1

      3a192c231530b9518ac5cdfb55942688f39f0424

    • SHA256

      5cdac84f4aabb64ea234ea303644a9a56232d3c6cef043955de0bbf911822ded

    • SHA512

      dd91d21be24470ca492f26495911c5b6a5cc255684bbf6e0b31b91782bbf0f50ea795b2bdfcac64b494ec7f615dcca99f1a810d8fb852a96ab2c9b63b42a46d0

    • SSDEEP

      6144:ibcAgd8n9LQchnwtyvIQCIbw43jelRW9mpH4:ibcAgKnZQchnw3QCUw43jewmpY

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Matrix

Tasks