Overview

overview

10

Static

static

3

7659101dea...18.exe

windows7-x64

10

7659101dea...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7659101dea80594502af14d56e2eb586_JaffaCakes118

  • Size

    386KB

  • Sample

    240401-wapwmabc35

  • MD5

    7659101dea80594502af14d56e2eb586

  • SHA1

    b8bba38f6797a2ab9905b78a96385e9380526855

  • SHA256

    c4597ec6efdc517a761c3d9e0dab3d4e243003b933ef33bf2283cfbc4e70acd9

  • SHA512

    2a0d41dd0ef5df7686652c5579c6a8a2efd7ea0f41d76db2fb65c7ecba6ea2bf32ebe132ed9f787b17562f1b1ec223632569ad413c4cf4bae91cac0276b95234

  • SSDEEP

    6144:oquJmIM4vMGzLfMUyod0yxPtMG5pvym4EtlyjfGPWDT8PbG:qJmIiGzLfKod0Ott5pqmNtlLPWDgy

Score
10/10
redlinesectopratusamoneyinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

usamoney

C2

45.142.215.47:27643

Attributes
  • auth_value

    9491a1c5e11eb6097e68a4fa8627fda8

Targets

    • Target

      7659101dea80594502af14d56e2eb586_JaffaCakes118

    • Size

      386KB

    • MD5

      7659101dea80594502af14d56e2eb586

    • SHA1

      b8bba38f6797a2ab9905b78a96385e9380526855

    • SHA256

      c4597ec6efdc517a761c3d9e0dab3d4e243003b933ef33bf2283cfbc4e70acd9

    • SHA512

      2a0d41dd0ef5df7686652c5579c6a8a2efd7ea0f41d76db2fb65c7ecba6ea2bf32ebe132ed9f787b17562f1b1ec223632569ad413c4cf4bae91cac0276b95234

    • SSDEEP

      6144:oquJmIM4vMGzLfMUyod0yxPtMG5pvym4EtlyjfGPWDT8PbG:qJmIiGzLfKod0Ott5pqmNtlLPWDgy

    Score
    10/10
    redlinesectopratusamoneyinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks