Overview

overview

10

Static

static

3

0976438f12...18.exe

windows7-x64

10

0976438f12...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0976438f123fede6f710a160e3617966_JaffaCakes118

  • Size

    323KB

  • Sample

    240328-s4h4dsag57

  • MD5

    0976438f123fede6f710a160e3617966

  • SHA1

    1f015aa4bf3133094692c741b4effdef6ade6a47

  • SHA256

    d78a626a36559da75eca7cb8e62e5e1c872633246a8ec664700dc968efc71f24

  • SHA512

    eb6941ea664a4d06754cc08eb88e15ef58e7f27ce2927841c31fd2fa9cd2aa58142c08c740e1bc8d0c0f0cf5d7d0c27547619ce20ce3d8f32e7e4306a0dc9057

  • SSDEEP

    6144:IQWIGvUMQmHaiFDod4M3vRVx98aC3oAxi1ZGpED:DWIGcmHtDodBH8n9izp

Score
10/10
redlinesectopratsewpalpinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

sewPalp

C2

185.215.113.29:24645

Attributes
  • auth_value

    41d3df6d093b1e36993abf16af0d6f2d

Targets

    • Target

      0976438f123fede6f710a160e3617966_JaffaCakes118

    • Size

      323KB

    • MD5

      0976438f123fede6f710a160e3617966

    • SHA1

      1f015aa4bf3133094692c741b4effdef6ade6a47

    • SHA256

      d78a626a36559da75eca7cb8e62e5e1c872633246a8ec664700dc968efc71f24

    • SHA512

      eb6941ea664a4d06754cc08eb88e15ef58e7f27ce2927841c31fd2fa9cd2aa58142c08c740e1bc8d0c0f0cf5d7d0c27547619ce20ce3d8f32e7e4306a0dc9057

    • SSDEEP

      6144:IQWIGvUMQmHaiFDod4M3vRVx98aC3oAxi1ZGpED:DWIGcmHtDodBH8n9izp

    Score
    10/10
    redlinesectopratsewpalpinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks