General

  • Target

    JaffaCakes118_58edb555373b161334e603870565b72d

  • Size

    971KB

  • Sample

    250101-rzlhaa1mgj

  • MD5

    58edb555373b161334e603870565b72d

  • SHA1

    93bb4bde7ad287390bf60b170cc0e486c3192cd4

  • SHA256

    95b21f46d637bf614de93916767c604f20df3385c5216b31a4e94f80800e26b3

  • SHA512

    fb027ec78ae6c7db7ecc2b1eddc06ab90df3dcf3d355b21b1cb21da4abd4b57a221d70177c852d1fc372d712317d2871084a476cea951568b1d7af5175c8f95b

  • SSDEEP

    12288:7jgSKclWABJBVX/ZemB27IlwbLBVvFaYc8X6HGRsJX6OY5u5wd3pDyuWOd1LfsSO:BKqBPaLobeCq8

Malware Config

Extracted

Family

redline

C2

141.94.188.138:46419

Attributes
  • auth_value

    3f48b95855158031ae9e7dafcb203009

Targets

    • Target

      JaffaCakes118_58edb555373b161334e603870565b72d

    • Size

      971KB

    • MD5

      58edb555373b161334e603870565b72d

    • SHA1

      93bb4bde7ad287390bf60b170cc0e486c3192cd4

    • SHA256

      95b21f46d637bf614de93916767c604f20df3385c5216b31a4e94f80800e26b3

    • SHA512

      fb027ec78ae6c7db7ecc2b1eddc06ab90df3dcf3d355b21b1cb21da4abd4b57a221d70177c852d1fc372d712317d2871084a476cea951568b1d7af5175c8f95b

    • SSDEEP

      12288:7jgSKclWABJBVX/ZemB27IlwbLBVvFaYc8X6HGRsJX6OY5u5wd3pDyuWOd1LfsSO:BKqBPaLobeCq8

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.