General

  • Target

    JaffaCakes118_d83e98876e674f5f4d8b65e2778d323c

  • Size

    333KB

  • Sample

    250110-cpceasylbt

  • MD5

    d83e98876e674f5f4d8b65e2778d323c

  • SHA1

    f68202ab618463e82909c283647cfb283f7083de

  • SHA256

    bd3267fd53435788fdae874b78b78affd70fbe962fa4d01dd5742eb8d2702bf2

  • SHA512

    ecbff398fd46776bb2a510cf2d2ea0a9bd66306f65d4de1ae417e18c2a2ef6bb7982131a134dcf5a0fd05da34c5b942d58d56bd4a4f6789177c35e34d624fb6a

  • SSDEEP

    6144:+QjMDgbSVHx3OvHiaE5gmjgVveBNcchBHOABOiNC4chD7LonIADG8elX:+Qj3bSrOxE5Ng4BNNBOA3NkLonxD+

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.182:52236

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      JaffaCakes118_d83e98876e674f5f4d8b65e2778d323c

    • Size

      333KB

    • MD5

      d83e98876e674f5f4d8b65e2778d323c

    • SHA1

      f68202ab618463e82909c283647cfb283f7083de

    • SHA256

      bd3267fd53435788fdae874b78b78affd70fbe962fa4d01dd5742eb8d2702bf2

    • SHA512

      ecbff398fd46776bb2a510cf2d2ea0a9bd66306f65d4de1ae417e18c2a2ef6bb7982131a134dcf5a0fd05da34c5b942d58d56bd4a4f6789177c35e34d624fb6a

    • SSDEEP

      6144:+QjMDgbSVHx3OvHiaE5gmjgVveBNcchBHOABOiNC4chD7LonIADG8elX:+Qj3bSrOxE5Ng4BNNBOA3NkLonxD+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks