Overview

overview

10

Static

static

3

531bf89779...18.exe

windows7-x64

10

531bf89779...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    531bf897798b70d567d834b43716cb82_JaffaCakes118

  • Size

    308KB

  • Sample

    240331-lkqksshe9y

  • MD5

    531bf897798b70d567d834b43716cb82

  • SHA1

    ba8df1ad8d454ae84506ea6923b5e70f819e2374

  • SHA256

    612cd4d03cbfa28cb20de4f17f25b53fe62f976c70551ffde420144270b31ff8

  • SHA512

    30ac99b62cd96eee81e1d7d128dc9cd9666f221c0a12355be85bc2583e84b343109499160610a5bf9679fad3b9d030339ad38ee44f194112674349fb70c758d9

  • SSDEEP

    6144:68fzUmUNHc2AGzfStygRvlz6UZudo4YILOmDW5S:hLUmUZbStr1aYkW5S

Score
10/10
redlinesectopratsewpalpinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

sewPalp

C2

185.215.113.29:24645

Attributes
  • auth_value

    41d3df6d093b1e36993abf16af0d6f2d

Targets

    • Target

      531bf897798b70d567d834b43716cb82_JaffaCakes118

    • Size

      308KB

    • MD5

      531bf897798b70d567d834b43716cb82

    • SHA1

      ba8df1ad8d454ae84506ea6923b5e70f819e2374

    • SHA256

      612cd4d03cbfa28cb20de4f17f25b53fe62f976c70551ffde420144270b31ff8

    • SHA512

      30ac99b62cd96eee81e1d7d128dc9cd9666f221c0a12355be85bc2583e84b343109499160610a5bf9679fad3b9d030339ad38ee44f194112674349fb70c758d9

    • SSDEEP

      6144:68fzUmUNHc2AGzfStygRvlz6UZudo4YILOmDW5S:hLUmUZbStr1aYkW5S

    Score
    10/10
    redlinesectopratsewpalpinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks