Overview

overview

10

Static

static

3

7acba4ec24...18.exe

windows7-x64

10

7acba4ec24...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7acba4ec24668bc2faf1debee8191fad_JaffaCakes118

  • Size

    384KB

  • Sample

    240401-z7fk1agb55

  • MD5

    7acba4ec24668bc2faf1debee8191fad

  • SHA1

    89f2970dedaa7f7b603aff4af87b188253f93f5d

  • SHA256

    816c594929cb406f430b4312f3f1642ea718717663047c971b0a3ef12c13c64c

  • SHA512

    4386ca114d8bcc3d18a9f4cdace5c6dc6193d956f60eead3a1432388ce98d22c3436cdf6cb104f7481e6d4e2a744dc3f42b90ebe77e843ea46d6c89ab41abdee

  • SSDEEP

    12288:6DAViFHMIqcUqm6G6XUIiNHsjTnEZ5mUR27MsU:TtqmgkIRj4yTU

Score
10/10
redlinesectopratusamoneyinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

usamoney

C2

45.142.215.47:27643

Attributes
  • auth_value

    9491a1c5e11eb6097e68a4fa8627fda8

Targets

    • Target

      7acba4ec24668bc2faf1debee8191fad_JaffaCakes118

    • Size

      384KB

    • MD5

      7acba4ec24668bc2faf1debee8191fad

    • SHA1

      89f2970dedaa7f7b603aff4af87b188253f93f5d

    • SHA256

      816c594929cb406f430b4312f3f1642ea718717663047c971b0a3ef12c13c64c

    • SHA512

      4386ca114d8bcc3d18a9f4cdace5c6dc6193d956f60eead3a1432388ce98d22c3436cdf6cb104f7481e6d4e2a744dc3f42b90ebe77e843ea46d6c89ab41abdee

    • SSDEEP

      12288:6DAViFHMIqcUqm6G6XUIiNHsjTnEZ5mUR27MsU:TtqmgkIRj4yTU

    Score
    10/10
    redlinesectopratusamoneyinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks