Overview

overview

10

Static

static

3

010b24550d...18.exe

windows7-x64

10

010b24550d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    010b24550d45e9864a47324d0cfbe587_JaffaCakes118

  • Size

    369KB

  • Sample

    240328-jzjdxsga4z

  • MD5

    010b24550d45e9864a47324d0cfbe587

  • SHA1

    f29b91411dc521108a67809472899a8878a788a4

  • SHA256

    38ef1f7a243e9cdafc4585e6b6396b0b077c7e212d8bcab4b2310de159208a8a

  • SHA512

    39d6c35fc3738bbbe6d7b6c503c9521e84aec7491b1a3d707d8f18a1d5288b24dff1f6b3a035942efd80039e38fe3ac5e1402972b3459a77e275fec75ad55e82

  • SSDEEP

    6144:s4+PN7LF/L0WtxMIEXPS8vvmh/WrQ5C2/4EGOekGQR0BuY:s4+PBLRftxpEXq8veh/P57GOekGQRrY

Score
10/10
redlinesectopratsewpalpinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

sewPalp

C2

185.215.113.29:24645

Attributes
  • auth_value

    41d3df6d093b1e36993abf16af0d6f2d

Targets

    • Target

      010b24550d45e9864a47324d0cfbe587_JaffaCakes118

    • Size

      369KB

    • MD5

      010b24550d45e9864a47324d0cfbe587

    • SHA1

      f29b91411dc521108a67809472899a8878a788a4

    • SHA256

      38ef1f7a243e9cdafc4585e6b6396b0b077c7e212d8bcab4b2310de159208a8a

    • SHA512

      39d6c35fc3738bbbe6d7b6c503c9521e84aec7491b1a3d707d8f18a1d5288b24dff1f6b3a035942efd80039e38fe3ac5e1402972b3459a77e275fec75ad55e82

    • SSDEEP

      6144:s4+PN7LF/L0WtxMIEXPS8vvmh/WrQ5C2/4EGOekGQR0BuY:s4+PBLRftxpEXq8veh/P57GOekGQRrY

    Score
    10/10
    redlinesectopratsewpalpinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks