Overview

overview

10

Static

static

3

ba7d1b1513...18.exe

windows7-x64

10

ba7d1b1513...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ba7d1b15134995c9aeee02f7991853e9_JaffaCakes118

  • Size

    276KB

  • Sample

    240404-rlatmaaa2t

  • MD5

    ba7d1b15134995c9aeee02f7991853e9

  • SHA1

    52e094faa669225efb59d0ef35f565e5fc9e0a5c

  • SHA256

    d65dc2b63a0f4c3d6d66aa6e39d377c2a20cd428ca861f019df2ccb730184f9f

  • SHA512

    12c5435015f2792f5427a3d53c4014dbfb1db6d9b85860c227deb2d9c091bdd58fd9671a8a9d03001283ffa224d7cabf66a381a7a03851343e72a828a031e822

  • SSDEEP

    6144:JODB4Qrbe66WL+h3hrur2GLTXWIR8KejCt7Vx98aCZrMCSyE:wB4c6WaL6aGLTXxStiH82C

Score
10/10
redlinesectopratbuildinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

build

C2

77.232.40.127:8204

Attributes
  • auth_value

    275ce2c87153d4e8e3cc276c686a93de

Targets

    • Target

      ba7d1b15134995c9aeee02f7991853e9_JaffaCakes118

    • Size

      276KB

    • MD5

      ba7d1b15134995c9aeee02f7991853e9

    • SHA1

      52e094faa669225efb59d0ef35f565e5fc9e0a5c

    • SHA256

      d65dc2b63a0f4c3d6d66aa6e39d377c2a20cd428ca861f019df2ccb730184f9f

    • SHA512

      12c5435015f2792f5427a3d53c4014dbfb1db6d9b85860c227deb2d9c091bdd58fd9671a8a9d03001283ffa224d7cabf66a381a7a03851343e72a828a031e822

    • SSDEEP

      6144:JODB4Qrbe66WL+h3hrur2GLTXWIR8KejCt7Vx98aCZrMCSyE:wB4c6WaL6aGLTXxStiH82C

    Score
    10/10
    redlinesectopratbuildinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks