Overview

overview

10

Static

static

3

8dddcf8d0d...18.exe

windows7-x64

10

8dddcf8d0d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8dddcf8d0db747feac78616645fd63e3_JaffaCakes118

  • Size

    318KB

  • Sample

    240402-qrgzfsbd5s

  • MD5

    8dddcf8d0db747feac78616645fd63e3

  • SHA1

    38d69948124b3c0d5b5d48e8fb7b278067ba719a

  • SHA256

    6439ed7d93a3e2bae153bbc84b22088d76c461f67b68a842bdc75efbec17f0d3

  • SHA512

    6bad0356502da07825a6f48d448615f2517f210dc6d423ac7cfda1918a469f212298df2bfc621e05f6cf9d2cf5863c64c619bf02c049b2ac2f9bf5b25eeb782a

  • SSDEEP

    6144:UuehM8IplXlq/ggNq9LlYpDV4vMEmVX0Q/Vx98aC3DB9BBiEE:UlhtYq/gx9BYBAM9nH8nDBta

Score
10/10
redlinesectopratsewpalpinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

sewPalp

C2

185.215.113.29:24645

Attributes
  • auth_value

    41d3df6d093b1e36993abf16af0d6f2d

Targets

    • Target

      8dddcf8d0db747feac78616645fd63e3_JaffaCakes118

    • Size

      318KB

    • MD5

      8dddcf8d0db747feac78616645fd63e3

    • SHA1

      38d69948124b3c0d5b5d48e8fb7b278067ba719a

    • SHA256

      6439ed7d93a3e2bae153bbc84b22088d76c461f67b68a842bdc75efbec17f0d3

    • SHA512

      6bad0356502da07825a6f48d448615f2517f210dc6d423ac7cfda1918a469f212298df2bfc621e05f6cf9d2cf5863c64c619bf02c049b2ac2f9bf5b25eeb782a

    • SSDEEP

      6144:UuehM8IplXlq/ggNq9LlYpDV4vMEmVX0Q/Vx98aC3DB9BBiEE:UlhtYq/gx9BYBAM9nH8nDBta

    Score
    10/10
    redlinesectopratsewpalpinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks