General

  • Target

    JaffaCakes118_33c9aacfe16db6f2955fbd24684ad5be

  • Size

    812KB

  • Sample

    241231-ytwjmayren

  • MD5

    33c9aacfe16db6f2955fbd24684ad5be

  • SHA1

    7b84f2e541f9a0f1ce437b27a49e47f5137f5980

  • SHA256

    7471293102d9a2f933dd7faacdf2ca19735b4b9b6a2bda78c4e11efbd44bb44d

  • SHA512

    6eaca454b191883ff27a8da8d12b961ffd3e944835229f875897f6d31036a04210337da801f948fe4454e25ae1223da68d6052d03f528e752651ff146b69933f

  • SSDEEP

    24576:V/3CD60nAL5f9WjGit+D2reyaMDUXuuo6k:V/CuvSab2reyQw

Malware Config

Extracted

Family

redline

Botnet

@selfort

C2

95.181.152.5:46927

Attributes
  • auth_value

    cdf3919a262c0d6ba99116b375d7551c

Targets

    • Target

      JaffaCakes118_33c9aacfe16db6f2955fbd24684ad5be

    • Size

      812KB

    • MD5

      33c9aacfe16db6f2955fbd24684ad5be

    • SHA1

      7b84f2e541f9a0f1ce437b27a49e47f5137f5980

    • SHA256

      7471293102d9a2f933dd7faacdf2ca19735b4b9b6a2bda78c4e11efbd44bb44d

    • SHA512

      6eaca454b191883ff27a8da8d12b961ffd3e944835229f875897f6d31036a04210337da801f948fe4454e25ae1223da68d6052d03f528e752651ff146b69933f

    • SSDEEP

      24576:V/3CD60nAL5f9WjGit+D2reyaMDUXuuo6k:V/CuvSab2reyQw

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks