General

  • Target

    JaffaCakes118_7f37846ea299d05145a1a6a62e7d5463

  • Size

    369KB

  • Sample

    250107-3l9hqstpbs

  • MD5

    7f37846ea299d05145a1a6a62e7d5463

  • SHA1

    b14745ead506752005708c16405df79f60314695

  • SHA256

    931e2ae6c9ad5fea459ea6fd112042434fc1c6b9593acb0d238bd256eb1c11ad

  • SHA512

    300be94eecb2ae94d53ba7dd979daaa0168589fb2ed247d55173134687ef734e16d10bb13a752f9ce15dc8eb07a0c9dcd281d82019b7d4263007814ad6791d2a

  • SSDEEP

    6144:o9CPkEhEEW4IrZ/NgWrd5CvY//GjG8KYX1ihI:oUGYqNgm55GjG8KYX/

Malware Config

Extracted

Family

redline

Botnet

sewPalp

C2

185.215.113.29:24645

Attributes
  • auth_value

    41d3df6d093b1e36993abf16af0d6f2d

Targets

    • Target

      JaffaCakes118_7f37846ea299d05145a1a6a62e7d5463

    • Size

      369KB

    • MD5

      7f37846ea299d05145a1a6a62e7d5463

    • SHA1

      b14745ead506752005708c16405df79f60314695

    • SHA256

      931e2ae6c9ad5fea459ea6fd112042434fc1c6b9593acb0d238bd256eb1c11ad

    • SHA512

      300be94eecb2ae94d53ba7dd979daaa0168589fb2ed247d55173134687ef734e16d10bb13a752f9ce15dc8eb07a0c9dcd281d82019b7d4263007814ad6791d2a

    • SSDEEP

      6144:o9CPkEhEEW4IrZ/NgWrd5CvY//GjG8KYX1ihI:oUGYqNgm55GjG8KYX/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks