General
-
Target
JaffaCakes118_95fe36361cf6f9d682f62527e99b167c
-
Size
336KB
-
Sample
250108-kfpbhaslaw
-
MD5
95fe36361cf6f9d682f62527e99b167c
-
SHA1
8efda99d89819a1279e34c730b73b758857c12dc
-
SHA256
97ea3278dc38e1f1231ad00eeba14ce90e43425d0ccf50434a0e7d1f49c1e229
-
SHA512
4dc9d4619c3d814577073c6d6085d4cbb22d91bd3c71130b07134dd704d26a5fdb9a6bbfdc97d0eaaa0496f84d56cb193266f3f9ae641fdbf008430dcc0f8ec0
-
SSDEEP
6144:80Ati69mtWwI8ZFl9f/irPCj0fpDrCJaCUEARqX7tNfVXVHQLIiu8cP:80b69mtWwv/iraAZaPwwZGEX8cP
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_95fe36361cf6f9d682f62527e99b167c.exe
Resource
win7-20240903-en
Malware Config
Extracted
redline
PUB
45.9.20.182:52236
-
auth_value
a272f3a2850ec3dccdaed97234b7c40e
Targets
-
-
Target
JaffaCakes118_95fe36361cf6f9d682f62527e99b167c
-
Size
336KB
-
MD5
95fe36361cf6f9d682f62527e99b167c
-
SHA1
8efda99d89819a1279e34c730b73b758857c12dc
-
SHA256
97ea3278dc38e1f1231ad00eeba14ce90e43425d0ccf50434a0e7d1f49c1e229
-
SHA512
4dc9d4619c3d814577073c6d6085d4cbb22d91bd3c71130b07134dd704d26a5fdb9a6bbfdc97d0eaaa0496f84d56cb193266f3f9ae641fdbf008430dcc0f8ec0
-
SSDEEP
6144:80Ati69mtWwI8ZFl9f/irPCj0fpDrCJaCUEARqX7tNfVXVHQLIiu8cP:80b69mtWwv/iraAZaPwwZGEX8cP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
SectopRAT payload
-
Sectoprat family
-