Overview

overview

10

Static

static

3

3dde959e3d...18.exe

windows7-x64

10

3dde959e3d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3dde959e3da37a62259e1ac281ab44a7_JaffaCakes118

  • Size

    384KB

  • Sample

    240330-rq482aha62

  • MD5

    3dde959e3da37a62259e1ac281ab44a7

  • SHA1

    c272e969935f19243d9097a87df99a36a4c28e7a

  • SHA256

    61a5abc25ea5501dc4d6fe9113f93ccbebd199a76d0429afa0fe040ae4a5b15b

  • SHA512

    7da894508414a5b3f01e0f4593a925030520be5dbcf34d99fd6e2132ade15815015d0d4eac59f275226019ccc6a5561709de6a2a4ab7f25e74039d0982dd41e9

  • SSDEEP

    6144:McvTMEauT6FXyZf6qQC9jk/Qv3R5njJb2/e/pxKsuTB4qDlI:F/4Af63C9A/QvznjJMQpxp4PDlI

Score
10/10
redlinesectopratsewpalpinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

sewPalp

C2

185.215.113.29:24645

Attributes
  • auth_value

    41d3df6d093b1e36993abf16af0d6f2d

Targets

    • Target

      3dde959e3da37a62259e1ac281ab44a7_JaffaCakes118

    • Size

      384KB

    • MD5

      3dde959e3da37a62259e1ac281ab44a7

    • SHA1

      c272e969935f19243d9097a87df99a36a4c28e7a

    • SHA256

      61a5abc25ea5501dc4d6fe9113f93ccbebd199a76d0429afa0fe040ae4a5b15b

    • SHA512

      7da894508414a5b3f01e0f4593a925030520be5dbcf34d99fd6e2132ade15815015d0d4eac59f275226019ccc6a5561709de6a2a4ab7f25e74039d0982dd41e9

    • SSDEEP

      6144:McvTMEauT6FXyZf6qQC9jk/Qv3R5njJb2/e/pxKsuTB4qDlI:F/4Af63C9A/QvznjJMQpxp4PDlI

    Score
    10/10
    redlinesectopratsewpalpinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks