General

  • Target

    JaffaCakes118_27704c4c5d21ccb9b708db0559cc9267

  • Size

    427KB

  • Sample

    250106-q8m7ssyjcs

  • MD5

    27704c4c5d21ccb9b708db0559cc9267

  • SHA1

    ae1a88d983506ae06fabd6c1229f47699412e13c

  • SHA256

    48dbee5034725e7841b2eb6db9b4019ca8ed6a6892af3040a1422c0b88702a6a

  • SHA512

    96e9de4289fa673171d54d0c8fcdd4ddb65f11353a98af23e01c793df1d4189f813f64970089ddc55130ce7a62661d9d6e31481eacc43ea11cd03fc7a1da9d5e

  • SSDEEP

    6144:9WoXX4QRF2s7fckamPpR6UNMZIKOdu97rW0uUgIbzS2c//pGyLSXoeHJP:9z4S75Pv6UyZITdu9fWUgAzS2kpGySY

Malware Config

Extracted

Family

redline

Botnet

palad

C2

188.68.201.6:29795

Attributes
  • auth_value

    f27db372188045eefdf974196ead3dae

Targets

    • Target

      JaffaCakes118_27704c4c5d21ccb9b708db0559cc9267

    • Size

      427KB

    • MD5

      27704c4c5d21ccb9b708db0559cc9267

    • SHA1

      ae1a88d983506ae06fabd6c1229f47699412e13c

    • SHA256

      48dbee5034725e7841b2eb6db9b4019ca8ed6a6892af3040a1422c0b88702a6a

    • SHA512

      96e9de4289fa673171d54d0c8fcdd4ddb65f11353a98af23e01c793df1d4189f813f64970089ddc55130ce7a62661d9d6e31481eacc43ea11cd03fc7a1da9d5e

    • SSDEEP

      6144:9WoXX4QRF2s7fckamPpR6UNMZIKOdu97rW0uUgIbzS2c//pGyLSXoeHJP:9z4S75Pv6UyZITdu9fWUgAzS2kpGySY

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks