General

  • Target

    JaffaCakes118_977bd10773276949895f567aa282c1d7

  • Size

    407KB

  • Sample

    250108-k3vf2awjgj

  • MD5

    977bd10773276949895f567aa282c1d7

  • SHA1

    03920bb245cb1bd769c7b45ea3f9fc583dd6f875

  • SHA256

    cea9c04e4423b446bf0e0c429634d3e2f622a7eaf107a1fed8e3c561b06609f0

  • SHA512

    cc534423437cbec38d3a3897f833b302ed474fcb36b98d413ac57e6736d7a22632138941ad235c37ddf1c3d3162f5f5a1227868b85b09853072c15afdd9b1198

  • SSDEEP

    12288:HFYq8x7Dljdroiwsjm0ijdYSAk4EevSOt:HKFroiHmbAk4E

Malware Config

Extracted

Family

redline

Botnet

sewPalp

C2

185.215.113.29:24645

Attributes
  • auth_value

    41d3df6d093b1e36993abf16af0d6f2d

Targets

    • Target

      JaffaCakes118_977bd10773276949895f567aa282c1d7

    • Size

      407KB

    • MD5

      977bd10773276949895f567aa282c1d7

    • SHA1

      03920bb245cb1bd769c7b45ea3f9fc583dd6f875

    • SHA256

      cea9c04e4423b446bf0e0c429634d3e2f622a7eaf107a1fed8e3c561b06609f0

    • SHA512

      cc534423437cbec38d3a3897f833b302ed474fcb36b98d413ac57e6736d7a22632138941ad235c37ddf1c3d3162f5f5a1227868b85b09853072c15afdd9b1198

    • SSDEEP

      12288:HFYq8x7Dljdroiwsjm0ijdYSAk4EevSOt:HKFroiHmbAk4E

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks