Overview

overview

10

Static

static

3

6447700f95...18.exe

windows7-x64

10

6447700f95...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6447700f9568bff991a3b8fdb07e72d3_JaffaCakes118

  • Size

    338KB

  • Sample

    240401-b6s8psab6t

  • MD5

    6447700f9568bff991a3b8fdb07e72d3

  • SHA1

    7d725131bf422051abee0220bbe5adddb416dd92

  • SHA256

    4c64ae9b30e6896df0fe4643fd41b26dccb877e3d8a751c64192e2b55bd46903

  • SHA512

    99b06decde55cfcbe1dda7b8b67f3a3098ca5ea9293d6ad293c6809b839848a7173ea8c3890d2b0ab54b2cc60ac50b2e3da966ee376feb823ab433e3bc97e81e

  • SSDEEP

    6144:QQ4Qph/SGSNOK7ghfKlCypf2SdXs0YvQlbOlERwAaB5usRjx+w47S:QhadSGSNOK7ghkCyp+I8axsERwAlslxH

Score
10/10
redlinesectopratsewpalpadininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.29:18087

Targets

    • Target

      6447700f9568bff991a3b8fdb07e72d3_JaffaCakes118

    • Size

      338KB

    • MD5

      6447700f9568bff991a3b8fdb07e72d3

    • SHA1

      7d725131bf422051abee0220bbe5adddb416dd92

    • SHA256

      4c64ae9b30e6896df0fe4643fd41b26dccb877e3d8a751c64192e2b55bd46903

    • SHA512

      99b06decde55cfcbe1dda7b8b67f3a3098ca5ea9293d6ad293c6809b839848a7173ea8c3890d2b0ab54b2cc60ac50b2e3da966ee376feb823ab433e3bc97e81e

    • SSDEEP

      6144:QQ4Qph/SGSNOK7ghfKlCypf2SdXs0YvQlbOlERwAaB5usRjx+w47S:QhadSGSNOK7ghkCyp+I8axsERwAlslxH

    Score
    10/10
    redlinesectopratsewpalpadininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks