General

  • Target

    JaffaCakes118_39b5f64cd7bcf556c36d279d6eb97c19

  • Size

    369KB

  • Sample

    250106-zlhhgaxlcx

  • MD5

    39b5f64cd7bcf556c36d279d6eb97c19

  • SHA1

    94ce61c18947b0e9e43ae30247afc94137c6728f

  • SHA256

    4b131c24c097c4a78fa16d36ab5230a589521a6e2137e0230f3fd531d4940660

  • SHA512

    737af39c52504f4576fd2353bb496fbef83091c486755ac6e14ef2624dea8b5d79abeadcee794681cd9f265d6194a9cd2a906355309534163da299851b9bb742

  • SSDEEP

    6144:MFcV+7HIdznzO99VMMdCVWr25CJnSEpG2OEmtsp2mU:M+VqIdzziAkCV55oG2OEmts7

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.182:52236

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      JaffaCakes118_39b5f64cd7bcf556c36d279d6eb97c19

    • Size

      369KB

    • MD5

      39b5f64cd7bcf556c36d279d6eb97c19

    • SHA1

      94ce61c18947b0e9e43ae30247afc94137c6728f

    • SHA256

      4b131c24c097c4a78fa16d36ab5230a589521a6e2137e0230f3fd531d4940660

    • SHA512

      737af39c52504f4576fd2353bb496fbef83091c486755ac6e14ef2624dea8b5d79abeadcee794681cd9f265d6194a9cd2a906355309534163da299851b9bb742

    • SSDEEP

      6144:MFcV+7HIdznzO99VMMdCVWr25CJnSEpG2OEmtsp2mU:M+VqIdzziAkCV55oG2OEmts7

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks