Overview

overview

10

Static

static

3

8a07091354...18.exe

windows7-x64

10

8a07091354...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a07091354324b193789a6b265e5726a_JaffaCakes118

  • Size

    385KB

  • Sample

    240402-mhma2aeh4x

  • MD5

    8a07091354324b193789a6b265e5726a

  • SHA1

    479a91422406e05844d46e15cd021bc5eddb7af0

  • SHA256

    951eee62f9678f774f46b2b452ecf66cea62a8bee377fedc9c787ec50e339170

  • SHA512

    d36a72dac805195cc4f638ee156de283b18335a8ab3ff27241fef56d1bab7b08a8d55996708e82352467e8105d7671f7ddda287adc4d9fa341ce40ab4f617330

  • SSDEEP

    6144:ZKH2svwtXlDloCce3AbGGOO3hBqjovaW9nD3ceU6HPbGMjgjn0:ZKQtXVmC1ShIjoSKnDA6HDFEn0

Score
10/10
redlinesectopratbuildinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

build

C2

77.232.40.127:8204

Attributes
  • auth_value

    275ce2c87153d4e8e3cc276c686a93de

Targets

    • Target

      8a07091354324b193789a6b265e5726a_JaffaCakes118

    • Size

      385KB

    • MD5

      8a07091354324b193789a6b265e5726a

    • SHA1

      479a91422406e05844d46e15cd021bc5eddb7af0

    • SHA256

      951eee62f9678f774f46b2b452ecf66cea62a8bee377fedc9c787ec50e339170

    • SHA512

      d36a72dac805195cc4f638ee156de283b18335a8ab3ff27241fef56d1bab7b08a8d55996708e82352467e8105d7671f7ddda287adc4d9fa341ce40ab4f617330

    • SSDEEP

      6144:ZKH2svwtXlDloCce3AbGGOO3hBqjovaW9nD3ceU6HPbGMjgjn0:ZKQtXVmC1ShIjoSKnDA6HDFEn0

    Score
    10/10
    redlinesectopratbuildinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks