Overview

overview

10

Static

static

3

8e96836e12...18.exe

windows7-x64

10

8e96836e12...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e96836e12836ab606f63a118a47073d_JaffaCakes118

  • Size

    309KB

  • Sample

    240402-rc4qcacf76

  • MD5

    8e96836e12836ab606f63a118a47073d

  • SHA1

    7de1859911924b029350c1408da293ea2054f8bf

  • SHA256

    367f0fab30809e4d25f5dd7fad4e387ddf2984f6651217959253cd63cb6820cd

  • SHA512

    6f65494a9332537d02c3dd8f0bf83f3b1d9e5e327f1d3874e9da4da0a0f7d73ecdad86e30c4693bc76d563c750b6cb16b28899a02b5381c063635948f2e45634

  • SSDEEP

    6144:bTCJBkjIakGraf6t0BXbrcHqujSVlJVx98aC3k2fsI:X2BaJkaIBXb3uiH8nqI

Score
10/10
redlinesectopratsewpalpinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

sewPalp

C2

185.215.113.29:24645

Attributes
  • auth_value

    41d3df6d093b1e36993abf16af0d6f2d

Targets

    • Target

      8e96836e12836ab606f63a118a47073d_JaffaCakes118

    • Size

      309KB

    • MD5

      8e96836e12836ab606f63a118a47073d

    • SHA1

      7de1859911924b029350c1408da293ea2054f8bf

    • SHA256

      367f0fab30809e4d25f5dd7fad4e387ddf2984f6651217959253cd63cb6820cd

    • SHA512

      6f65494a9332537d02c3dd8f0bf83f3b1d9e5e327f1d3874e9da4da0a0f7d73ecdad86e30c4693bc76d563c750b6cb16b28899a02b5381c063635948f2e45634

    • SSDEEP

      6144:bTCJBkjIakGraf6t0BXbrcHqujSVlJVx98aC3k2fsI:X2BaJkaIBXb3uiH8nqI

    Score
    10/10
    redlinesectopratsewpalpinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks