Overview

overview

10

Static

static

3

6c7b921ab9...18.exe

windows7-x64

10

6c7b921ab9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c7b921ab9c2812f0967e9595046d776_JaffaCakes118

  • Size

    407KB

  • Sample

    240401-jywmvshe69

  • MD5

    6c7b921ab9c2812f0967e9595046d776

  • SHA1

    a0a88054cd89b01d87b3ba3bb044d847df920421

  • SHA256

    377af15eaf4fa5c8f4fdd1e44a084da87100aea69d522e2f860bac7b4b0955b8

  • SHA512

    dd1a3cc313917ba720673b4cd724f74c137dbc7cf632f30af75a0b015c21b8cc26be0181b9709ea426a4629d59be7ce26b627d7b2909007540bfc09e88e15c41

  • SSDEEP

    12288:V3c7uQ93sfDlotxYc/KdVbsdW6IKF27nSyK:V8uQ9c5ozYRd4IKF2

Score
10/10
redlinesectopratbuild999infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

build999

C2

77.232.40.127:8204

Attributes
  • auth_value

    275ce2c87153d4e8e3cc276c686a93de

Targets

    • Target

      6c7b921ab9c2812f0967e9595046d776_JaffaCakes118

    • Size

      407KB

    • MD5

      6c7b921ab9c2812f0967e9595046d776

    • SHA1

      a0a88054cd89b01d87b3ba3bb044d847df920421

    • SHA256

      377af15eaf4fa5c8f4fdd1e44a084da87100aea69d522e2f860bac7b4b0955b8

    • SHA512

      dd1a3cc313917ba720673b4cd724f74c137dbc7cf632f30af75a0b015c21b8cc26be0181b9709ea426a4629d59be7ce26b627d7b2909007540bfc09e88e15c41

    • SSDEEP

      12288:V3c7uQ93sfDlotxYc/KdVbsdW6IKF27nSyK:V8uQ9c5ozYRd4IKF2

    Score
    10/10
    redlinesectopratbuild999infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks