Overview

overview

10

Static

static

3

c47e44da6d...18.exe

windows7-x64

10

c47e44da6d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c47e44da6db2d1a427408da5ca970af2_JaffaCakes118

  • Size

    324KB

  • Sample

    240404-3bjjkadc5t

  • MD5

    c47e44da6db2d1a427408da5ca970af2

  • SHA1

    6ebc77734cb4e1ace98b73d1962aa73eb8b7f503

  • SHA256

    80a48ecd98c59c948b747df15857a32f997d39970f1a330affdc32178feeb1b6

  • SHA512

    eac77982f4bade8acb6f458c44656e0c2b29d6c41881b39f388817471cd5db8a0227d4970e8d019d3a68b296bfdd24c8d975f398dcf9c58d072a835135ebd173

  • SSDEEP

    6144:zglICftrs3qhISkOPedrgtiWE+2HlRVx98aC3jzfkEI:slICfiahIrXtH8njzE

Score
10/10
redlinesectopratusamoneyinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

usamoney

C2

45.142.215.47:27643

Attributes
  • auth_value

    9491a1c5e11eb6097e68a4fa8627fda8

Targets

    • Target

      c47e44da6db2d1a427408da5ca970af2_JaffaCakes118

    • Size

      324KB

    • MD5

      c47e44da6db2d1a427408da5ca970af2

    • SHA1

      6ebc77734cb4e1ace98b73d1962aa73eb8b7f503

    • SHA256

      80a48ecd98c59c948b747df15857a32f997d39970f1a330affdc32178feeb1b6

    • SHA512

      eac77982f4bade8acb6f458c44656e0c2b29d6c41881b39f388817471cd5db8a0227d4970e8d019d3a68b296bfdd24c8d975f398dcf9c58d072a835135ebd173

    • SSDEEP

      6144:zglICftrs3qhISkOPedrgtiWE+2HlRVx98aC3jzfkEI:slICfiahIrXtH8njzE

    Score
    10/10
    redlinesectopratusamoneyinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks