Overview

overview

10

Static

static

3

2dde9ecca4...18.exe

windows7-x64

10

2dde9ecca4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2dde9ecca47687be8a1e10593699f198_JaffaCakes118

  • Size

    426KB

  • Sample

    240329-1w649aah5x

  • MD5

    2dde9ecca47687be8a1e10593699f198

  • SHA1

    d754f95d285f7865b5bc054cdf4fb2b629019102

  • SHA256

    34e501b73a9fe6221bfb25ac8a702bc7b1306a1d3362aa2ecb5d98f91960792d

  • SHA512

    e2feeb188874453c6c08da79898e1c89c94114c942b6286df8da536d75e854c7335f92730a56d237c45dd5d6f259a2cd19a11a4668cada0686d7008301251770

  • SSDEEP

    6144:IWAoJ3ws/Qf8o2M9MsMKPf9QdmBnnNoYiZ+1NUb8LMpayB8fqRyvm/hxPbB:IoMDPf9QdmBnnNoYi83UbsMphwqRymp

Score
10/10
redlinesectopratpaladininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

37.228.129.48:29795

Attributes
  • auth_value

    f27db372188045eefdf974196ead3dae

Targets

    • Target

      2dde9ecca47687be8a1e10593699f198_JaffaCakes118

    • Size

      426KB

    • MD5

      2dde9ecca47687be8a1e10593699f198

    • SHA1

      d754f95d285f7865b5bc054cdf4fb2b629019102

    • SHA256

      34e501b73a9fe6221bfb25ac8a702bc7b1306a1d3362aa2ecb5d98f91960792d

    • SHA512

      e2feeb188874453c6c08da79898e1c89c94114c942b6286df8da536d75e854c7335f92730a56d237c45dd5d6f259a2cd19a11a4668cada0686d7008301251770

    • SSDEEP

      6144:IWAoJ3ws/Qf8o2M9MsMKPf9QdmBnnNoYiZ+1NUb8LMpayB8fqRyvm/hxPbB:IoMDPf9QdmBnnNoYi83UbsMphwqRymp

    Score
    10/10
    redlinesectopratpaladininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks