Overview

overview

10

Static

static

3

a099569199...18.exe

windows7-x64

10

a099569199...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a099569199eeaac543c9292f0386f76b_JaffaCakes118

  • Size

    385KB

  • Sample

    240403-fe2g8agh38

  • MD5

    a099569199eeaac543c9292f0386f76b

  • SHA1

    0cf25f083f07ca209d157da17dd545681e9f4429

  • SHA256

    876132f90719536e9ec631f797001decf5013eb3ace4a7b5b94eeb6b72d10667

  • SHA512

    735699966d7105a5a424b0206bc1a68ece1175dea0738a3a27bd5fc3a2620ed687ce2c9805fd1be78f184e2a5cd01aef5de94a51729a7b9ec3857b16f03d17b1

  • SSDEEP

    12288:R0h1n4CrfLq0JsX4ZkloBcjmktNCIkozf+:Kn4Af+lXpmUC

Score
10/10
redlinesectopratbuildinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

build

C2

77.232.40.127:8204

Attributes
  • auth_value

    275ce2c87153d4e8e3cc276c686a93de

Targets

    • Target

      a099569199eeaac543c9292f0386f76b_JaffaCakes118

    • Size

      385KB

    • MD5

      a099569199eeaac543c9292f0386f76b

    • SHA1

      0cf25f083f07ca209d157da17dd545681e9f4429

    • SHA256

      876132f90719536e9ec631f797001decf5013eb3ace4a7b5b94eeb6b72d10667

    • SHA512

      735699966d7105a5a424b0206bc1a68ece1175dea0738a3a27bd5fc3a2620ed687ce2c9805fd1be78f184e2a5cd01aef5de94a51729a7b9ec3857b16f03d17b1

    • SSDEEP

      12288:R0h1n4CrfLq0JsX4ZkloBcjmktNCIkozf+:Kn4Af+lXpmUC

    Score
    10/10
    redlinesectopratbuildinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks