Overview

overview

10

Static

static

3

4ae1678a6a...18.exe

windows7-x64

10

4ae1678a6a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ae1678a6a7642981a55f2701408bebf_JaffaCakes118

  • Size

    360KB

  • Sample

    240331-c37glacg56

  • MD5

    4ae1678a6a7642981a55f2701408bebf

  • SHA1

    c735c1f5ced6d2f85d71c245cffea2beb2d999a1

  • SHA256

    38f872957df8d51c6811126c67a133531335babd02f878052263e6934e8d4161

  • SHA512

    392289b891c9e7193cda1d15a756af6fb2e61cdd97aef7b26ea3bdde4278a1838110a04dc8e5126c340b10522454da4a345f56feb1d6e7072c989401d9ffc319

  • SSDEEP

    6144:xFDPgKGc9yWGwbUYU+jL8Rkvc1imUVx98aCYcW5SL:rLgKGc9Lbz//8iH8ocW5SL

Score
10/10
redlinesectopratusamoneyinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

usamoney

C2

45.142.215.47:27643

Attributes
  • auth_value

    9491a1c5e11eb6097e68a4fa8627fda8

Targets

    • Target

      4ae1678a6a7642981a55f2701408bebf_JaffaCakes118

    • Size

      360KB

    • MD5

      4ae1678a6a7642981a55f2701408bebf

    • SHA1

      c735c1f5ced6d2f85d71c245cffea2beb2d999a1

    • SHA256

      38f872957df8d51c6811126c67a133531335babd02f878052263e6934e8d4161

    • SHA512

      392289b891c9e7193cda1d15a756af6fb2e61cdd97aef7b26ea3bdde4278a1838110a04dc8e5126c340b10522454da4a345f56feb1d6e7072c989401d9ffc319

    • SSDEEP

      6144:xFDPgKGc9yWGwbUYU+jL8Rkvc1imUVx98aCYcW5SL:rLgKGc9Lbz//8iH8ocW5SL

    Score
    10/10
    redlinesectopratusamoneyinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks