General

  • Target

    JaffaCakes118_b740a2b35529f66aedf9909807cf779c

  • Size

    369KB

  • Sample

    250105-xbnkmasmev

  • MD5

    b740a2b35529f66aedf9909807cf779c

  • SHA1

    aa13ee753ce47a1362011876827b23f99f9b0493

  • SHA256

    f988bd8841bd66ef75f975fff416e3eb9fc11c0603ad57f36769a36e422240be

  • SHA512

    5840830f5cddb38201ca28b6b22fd0749f86115e15af6ab088a8a846fafa1ac5c47d8a13ff336c489d7882820e88d377b77e36412d09daf5a2425076f655793f

  • SSDEEP

    6144:5TE7pYczts5ePdbdQT3ZAvG+Wrs5C8H5BGsJddzL/Jl5aQp:2YCtssPdRupCG+b5VGsJddzLR1p

Malware Config

Extracted

Family

redline

Botnet

mix16.10

C2

185.215.113.15:57055

Attributes
  • auth_value

    408e5b97cb89314de620529179330c9a

Targets

    • Target

      JaffaCakes118_b740a2b35529f66aedf9909807cf779c

    • Size

      369KB

    • MD5

      b740a2b35529f66aedf9909807cf779c

    • SHA1

      aa13ee753ce47a1362011876827b23f99f9b0493

    • SHA256

      f988bd8841bd66ef75f975fff416e3eb9fc11c0603ad57f36769a36e422240be

    • SHA512

      5840830f5cddb38201ca28b6b22fd0749f86115e15af6ab088a8a846fafa1ac5c47d8a13ff336c489d7882820e88d377b77e36412d09daf5a2425076f655793f

    • SSDEEP

      6144:5TE7pYczts5ePdbdQT3ZAvG+Wrs5C8H5BGsJddzL/Jl5aQp:2YCtssPdRupCG+b5VGsJddzLR1p

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks