Overview

overview

10

Static

static

3

16880c4a15...18.exe

windows7-x64

10

16880c4a15...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    16880c4a15b66ebda02962b7dd768a5e_JaffaCakes118

  • Size

    385KB

  • Sample

    240329-da98fsgc88

  • MD5

    16880c4a15b66ebda02962b7dd768a5e

  • SHA1

    927f34a2406f4d6c5de9415b7a73e24aab0dc088

  • SHA256

    d8f0f7e72ebdb4a798f643a4638fcdc03cce942b492c20694107c1114f2a6b60

  • SHA512

    151f376d65a7095fe9168ffda859ab2bbf8d1c7a91a83c7cfb2fbdc48f13d3300096aa6c3d395efec103cb8eb1bb7543a5df1ee4b930e58c5e4f7de9204d2ff6

  • SSDEEP

    6144:ZY3rreuRjiy48yRlIzft4cxs/xvNZ5nr0bgBmBPJXfmGt4V:EGuRjT48yRmCcK/xlrnr0I+PJPZ

Score
10/10
redlinesectopratshopinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

shop

C2

45.9.20.107:46187

Attributes
  • auth_value

    60c75f1e2d31f6bac6dd7edad67d8615

Targets

    • Target

      16880c4a15b66ebda02962b7dd768a5e_JaffaCakes118

    • Size

      385KB

    • MD5

      16880c4a15b66ebda02962b7dd768a5e

    • SHA1

      927f34a2406f4d6c5de9415b7a73e24aab0dc088

    • SHA256

      d8f0f7e72ebdb4a798f643a4638fcdc03cce942b492c20694107c1114f2a6b60

    • SHA512

      151f376d65a7095fe9168ffda859ab2bbf8d1c7a91a83c7cfb2fbdc48f13d3300096aa6c3d395efec103cb8eb1bb7543a5df1ee4b930e58c5e4f7de9204d2ff6

    • SSDEEP

      6144:ZY3rreuRjiy48yRlIzft4cxs/xvNZ5nr0bgBmBPJXfmGt4V:EGuRjT48yRmCcK/xlrnr0I+PJPZ

    Score
    10/10
    redlinesectopratshopinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks