Overview

overview

10

Static

static

3

4bce2e2de7...18.exe

windows7-x64

10

4bce2e2de7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4bce2e2de7245e74e5817ef76d28fc95_JaffaCakes118

  • Size

    406KB

  • Sample

    240331-dwskjach4t

  • MD5

    4bce2e2de7245e74e5817ef76d28fc95

  • SHA1

    371d4da54908400e13874ce816669505a36afe4e

  • SHA256

    9c0cea597c2bdd402f6e0c6ca6e158f2e0b384467b69388f5d27f5d34235da90

  • SHA512

    f92b0270e3eb7a1ffcec1e5c7fdc06121d05574f621f2cc4fe2b0691c1f207b056a1d6e2b9c85b3b264edc1aa21c00ca7cc66a109e45ff156d2bdcee502bf204

  • SSDEEP

    6144:A/VAm48Sjy+LbwaJOcrNeVkzEFUi90uJmrKhUKdgGGYui1dLlyUWuD+5:AM88bwaXN3i91JmrWxdgGGYRHldWu

Score
10/10
redlinesectopratpubinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.182:52236

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      4bce2e2de7245e74e5817ef76d28fc95_JaffaCakes118

    • Size

      406KB

    • MD5

      4bce2e2de7245e74e5817ef76d28fc95

    • SHA1

      371d4da54908400e13874ce816669505a36afe4e

    • SHA256

      9c0cea597c2bdd402f6e0c6ca6e158f2e0b384467b69388f5d27f5d34235da90

    • SHA512

      f92b0270e3eb7a1ffcec1e5c7fdc06121d05574f621f2cc4fe2b0691c1f207b056a1d6e2b9c85b3b264edc1aa21c00ca7cc66a109e45ff156d2bdcee502bf204

    • SSDEEP

      6144:A/VAm48Sjy+LbwaJOcrNeVkzEFUi90uJmrKhUKdgGGYui1dLlyUWuD+5:AM88bwaXN3i91JmrWxdgGGYRHldWu

    Score
    10/10
    redlinesectopratpubinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks