General
-
Target
JaffaCakes118_0bcb3b719c9cf3c9d124e069c881d364
-
Size
360KB
-
Sample
241231-jk2xqa1nfl
-
MD5
0bcb3b719c9cf3c9d124e069c881d364
-
SHA1
99243f95cd453e533d3c9871067b56255afb0140
-
SHA256
c9307617a68ff475b2e9670e72ad89339717637e8916b6915cbf82e38f7b6129
-
SHA512
a7a1bdaf3717a565f5650f17e51d933c93d1ad0e97e39b7119e57f07334f0fa8f8c88b972dcde764349fc90863415d3e53d1b1a74d42b253aa4e172f8faf1a30
-
SSDEEP
6144:R4DPgKCeMYDQD681rDAcmlD7rmHxp9qjhOMmUVx98aCYcW5S0:OLgKC0DOl1rDADlDOHxp0pH8ocW5S0
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_0bcb3b719c9cf3c9d124e069c881d364.exe
Resource
win7-20240903-en
Malware Config
Extracted
redline
usamoney
45.142.215.47:27643
-
auth_value
9491a1c5e11eb6097e68a4fa8627fda8
Targets
-
-
Target
JaffaCakes118_0bcb3b719c9cf3c9d124e069c881d364
-
Size
360KB
-
MD5
0bcb3b719c9cf3c9d124e069c881d364
-
SHA1
99243f95cd453e533d3c9871067b56255afb0140
-
SHA256
c9307617a68ff475b2e9670e72ad89339717637e8916b6915cbf82e38f7b6129
-
SHA512
a7a1bdaf3717a565f5650f17e51d933c93d1ad0e97e39b7119e57f07334f0fa8f8c88b972dcde764349fc90863415d3e53d1b1a74d42b253aa4e172f8faf1a30
-
SSDEEP
6144:R4DPgKCeMYDQD681rDAcmlD7rmHxp9qjhOMmUVx98aCYcW5S0:OLgKC0DOl1rDADlDOHxp0pH8ocW5S0
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
SectopRAT payload
-
Sectoprat family
-