Overview

overview

10

Static

static

3

73715b3318...18.exe

windows7-x64

10

73715b3318...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    73715b3318e15d4b5e9ab1679f295a0b_JaffaCakes118

  • Size

    366KB

  • Sample

    240401-rpw62afh81

  • MD5

    73715b3318e15d4b5e9ab1679f295a0b

  • SHA1

    c01ee1d1300c2919477723eb1a6812d40ed5b103

  • SHA256

    d0b8fa81bbdc0fec334afc74e0cd33f2fc941eb636cfd700129d4026a761baa4

  • SHA512

    1b6c3b4d5064fbf2c212618942702c5f34e5b0fbd24bd3436c0033ac386932d04f9202da834ecd154337917f66137314be29ba04ceb24702de2a969dca2fec0b

  • SSDEEP

    6144:7uYqib+jySdYwbq1glZqSzcqNOdBq/f5qmUkuOZTJYy:C6+WSdYwG1gl7UdBq/f1UkuC2y

Score
10/10
redlinesectopratusamoneyinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

usamoney

C2

45.142.215.47:27643

Attributes
  • auth_value

    9491a1c5e11eb6097e68a4fa8627fda8

Targets

    • Target

      73715b3318e15d4b5e9ab1679f295a0b_JaffaCakes118

    • Size

      366KB

    • MD5

      73715b3318e15d4b5e9ab1679f295a0b

    • SHA1

      c01ee1d1300c2919477723eb1a6812d40ed5b103

    • SHA256

      d0b8fa81bbdc0fec334afc74e0cd33f2fc941eb636cfd700129d4026a761baa4

    • SHA512

      1b6c3b4d5064fbf2c212618942702c5f34e5b0fbd24bd3436c0033ac386932d04f9202da834ecd154337917f66137314be29ba04ceb24702de2a969dca2fec0b

    • SSDEEP

      6144:7uYqib+jySdYwbq1glZqSzcqNOdBq/f5qmUkuOZTJYy:C6+WSdYwG1gl7UdBq/f1UkuC2y

    Score
    10/10
    redlinesectopratusamoneyinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks