Overview

overview

10

Static

static

3

57870e8814...18.exe

windows7-x64

10

57870e8814...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    57870e8814827ca8012c6a409c81d65d_JaffaCakes118

  • Size

    367KB

  • Sample

    240331-sapdbaed46

  • MD5

    57870e8814827ca8012c6a409c81d65d

  • SHA1

    becb9f123bea30c73f4284883244b388f53c9e6c

  • SHA256

    0bd9852faaa9bdf51cef768e3f23419ba8b2895344d2e9ce50726c75aeb65347

  • SHA512

    83bb0d8cbefff9e7899c4b220b6fee5070cdf4a08a3b5654171e92d80351d7dc41524a055bf9cbafc11d44d9ded804a48a77b2a16bbceaa256425364cd1d1e61

  • SSDEEP

    6144:CfZc9cHww2LE56NyxT4x/ENY7EF/LvRIVEsfvny/jC:IZtw3+6NBsK7EF/LuVEs3GC

Score
10/10
redlinesectopratusamoneyinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

usamoney

C2

45.142.215.47:27643

Attributes
  • auth_value

    9491a1c5e11eb6097e68a4fa8627fda8

Targets

    • Target

      57870e8814827ca8012c6a409c81d65d_JaffaCakes118

    • Size

      367KB

    • MD5

      57870e8814827ca8012c6a409c81d65d

    • SHA1

      becb9f123bea30c73f4284883244b388f53c9e6c

    • SHA256

      0bd9852faaa9bdf51cef768e3f23419ba8b2895344d2e9ce50726c75aeb65347

    • SHA512

      83bb0d8cbefff9e7899c4b220b6fee5070cdf4a08a3b5654171e92d80351d7dc41524a055bf9cbafc11d44d9ded804a48a77b2a16bbceaa256425364cd1d1e61

    • SSDEEP

      6144:CfZc9cHww2LE56NyxT4x/ENY7EF/LvRIVEsfvny/jC:IZtw3+6NBsK7EF/LuVEs3GC

    Score
    10/10
    redlinesectopratusamoneyinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks