General

  • Target

    JaffaCakes118_a12c210f01d4c06dda51c548b0d92847

  • Size

    407KB

  • Sample

    250108-qds5katkgj

  • MD5

    a12c210f01d4c06dda51c548b0d92847

  • SHA1

    04f26c5bd09ff57400280ac1d2e782b6e46e65ac

  • SHA256

    331b5012490d32e2ca502d6bffd2203574b0bbd272ae0f39c03dd254fa0a8528

  • SHA512

    8786925a31129eb75cbe5941bd70f1bca12aa0cee0d48deb115c755df8710f6879a5b5ef0db9f4c219edc81eac55639a80c50f079823febed4c6b6288144cf4b

  • SSDEEP

    12288:J06uMKw97a9zVOmkAqB7udz/1c3pHedSb:J0IzaxVOeqEtc3pH

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.182:52236

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      JaffaCakes118_a12c210f01d4c06dda51c548b0d92847

    • Size

      407KB

    • MD5

      a12c210f01d4c06dda51c548b0d92847

    • SHA1

      04f26c5bd09ff57400280ac1d2e782b6e46e65ac

    • SHA256

      331b5012490d32e2ca502d6bffd2203574b0bbd272ae0f39c03dd254fa0a8528

    • SHA512

      8786925a31129eb75cbe5941bd70f1bca12aa0cee0d48deb115c755df8710f6879a5b5ef0db9f4c219edc81eac55639a80c50f079823febed4c6b6288144cf4b

    • SSDEEP

      12288:J06uMKw97a9zVOmkAqB7udz/1c3pHedSb:J0IzaxVOeqEtc3pH

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks