Overview

overview

10

Static

static

3

7b1178256b...18.exe

windows7-x64

10

7b1178256b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b1178256b009b475ae5fd6bbdb0ba7f_JaffaCakes118

  • Size

    187KB

  • Sample

    240401-1ery1afg6v

  • MD5

    7b1178256b009b475ae5fd6bbdb0ba7f

  • SHA1

    8c71437d484167081cccfe2b6fae08ccb1fdfac8

  • SHA256

    70196eb64b3b386e0a407e64e973970ec30a7ea92c9e8d15f7314042726a507e

  • SHA512

    26d1feb11743192e6a5495427848a005f32a31d0954b3717ff3d7ff9bb80c2c3ec9aaf6bfc9998b8fb2f977b8d9edbd199bfa02da5b6f40a6ad3f9d50c16efc4

  • SSDEEP

    3072:EDKW1LgppLRHMY0TBfJvjcTp5XqO74gr8McXbI6ZrCuL:EDKW1Lgbdl0TBBvjc/J4gr9ck6Z

Score
10/10
redlinesectoprat05.10infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

05.10

C2

80.92.205.116:59599

Attributes
  • auth_value

    9987bbbfa5d086577a66d521ae15b57e

Targets

    • Target

      7b1178256b009b475ae5fd6bbdb0ba7f_JaffaCakes118

    • Size

      187KB

    • MD5

      7b1178256b009b475ae5fd6bbdb0ba7f

    • SHA1

      8c71437d484167081cccfe2b6fae08ccb1fdfac8

    • SHA256

      70196eb64b3b386e0a407e64e973970ec30a7ea92c9e8d15f7314042726a507e

    • SHA512

      26d1feb11743192e6a5495427848a005f32a31d0954b3717ff3d7ff9bb80c2c3ec9aaf6bfc9998b8fb2f977b8d9edbd199bfa02da5b6f40a6ad3f9d50c16efc4

    • SSDEEP

      3072:EDKW1LgppLRHMY0TBfJvjcTp5XqO74gr8McXbI6ZrCuL:EDKW1Lgbdl0TBBvjc/J4gr9ck6Z

    Score
    10/10
    redlinesectoprat05.10infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks