Overview

overview

10

Static

static

3

2f3dfd1ff8...18.exe

windows7-x64

10

2f3dfd1ff8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2f3dfd1ff888a854330636bef70de172_JaffaCakes118

  • Size

    412KB

  • Sample

    240330-arax5sdf42

  • MD5

    2f3dfd1ff888a854330636bef70de172

  • SHA1

    1383f393a25538d7d3a6f5dfde737a824270315a

  • SHA256

    4922891e6b053807054a0c672b1c32ac287e9784200da2d6d75ef5c124da366e

  • SHA512

    ecf5495f817422f5bfecd91caedee2d5b698d72d523815b9292d2e996f60d96c671f52d1dc3de5de8605d253fa0495db8bb848e295b92a572535c03651f36247

  • SSDEEP

    6144:5MoceT4hgxnVs3ESQasv9i5WzeoIISvnRRxfGXaK5LOs4TKVojuSMZ:kInVQESQaCze9ISPHxfkaK5L0TKVojx

Score
10/10
redlinesectopratnewinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

new

C2

45.9.20.107:46187

Attributes
  • auth_value

    60c75f1e2d31f6bac6dd7edad67d8615

Targets

    • Target

      2f3dfd1ff888a854330636bef70de172_JaffaCakes118

    • Size

      412KB

    • MD5

      2f3dfd1ff888a854330636bef70de172

    • SHA1

      1383f393a25538d7d3a6f5dfde737a824270315a

    • SHA256

      4922891e6b053807054a0c672b1c32ac287e9784200da2d6d75ef5c124da366e

    • SHA512

      ecf5495f817422f5bfecd91caedee2d5b698d72d523815b9292d2e996f60d96c671f52d1dc3de5de8605d253fa0495db8bb848e295b92a572535c03651f36247

    • SSDEEP

      6144:5MoceT4hgxnVs3ESQasv9i5WzeoIISvnRRxfGXaK5LOs4TKVojuSMZ:kInVQESQaCze9ISPHxfkaK5L0TKVojx

    Score
    10/10
    redlinesectopratnewinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks