Overview

overview

10

Static

static

3

bae8993d61...18.exe

windows7-x64

10

bae8993d61...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bae8993d61a69f28f52fbd7e0bd29e4e_JaffaCakes118

  • Size

    370KB

  • Sample

    240404-rzve7aad4s

  • MD5

    bae8993d61a69f28f52fbd7e0bd29e4e

  • SHA1

    fc6e68ce521cc22c165b906208f33424bdca14d0

  • SHA256

    fb3d68e80310188d5096ff5344fe895e6a6fcb73d972e9c508609e7182f55000

  • SHA512

    b70fd4b3ff6535eefa2e1a9bda641a7ccf83c555d22da095887c02ce5a7411229ba4f11a9a4cd6a3aa93cf78388f93468531601cbfeca2e281953d330c31594f

  • SSDEEP

    6144:0poGhOEZqgDU3uUccZHjB0KOarZsq9hINgrZk/uc3nwI4ceKZO2Uv5:0tZD2ccsFcZFhIWrZk/uqwI4ce+M5

Score
10/10
redlinesectopratsewpalpinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

sewPalp

C2

185.215.113.29:24645

Attributes
  • auth_value

    41d3df6d093b1e36993abf16af0d6f2d

Targets

    • Target

      bae8993d61a69f28f52fbd7e0bd29e4e_JaffaCakes118

    • Size

      370KB

    • MD5

      bae8993d61a69f28f52fbd7e0bd29e4e

    • SHA1

      fc6e68ce521cc22c165b906208f33424bdca14d0

    • SHA256

      fb3d68e80310188d5096ff5344fe895e6a6fcb73d972e9c508609e7182f55000

    • SHA512

      b70fd4b3ff6535eefa2e1a9bda641a7ccf83c555d22da095887c02ce5a7411229ba4f11a9a4cd6a3aa93cf78388f93468531601cbfeca2e281953d330c31594f

    • SSDEEP

      6144:0poGhOEZqgDU3uUccZHjB0KOarZsq9hINgrZk/uc3nwI4ceKZO2Uv5:0tZD2ccsFcZFhIWrZk/uqwI4ce+M5

    Score
    10/10
    redlinesectopratsewpalpinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks