Overview

overview

10

Static

static

3

c80f43e46a...18.exe

windows7-x64

10

c80f43e46a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c80f43e46ab57da6be664ef0175c4ba4_JaffaCakes118

  • Size

    366KB

  • Sample

    240405-cpvwmshe7v

  • MD5

    c80f43e46ab57da6be664ef0175c4ba4

  • SHA1

    5adc22e302c9e4d51c9963138f22fb5b69cad500

  • SHA256

    99e62cbc82f17ed961e5e0ba0e291863d70868e018ae1d78c00162a799f3f483

  • SHA512

    8531f7ea9f17f6e9e3f8aec72db2526d607bb3b24651b932b5180e6e5ea727a3a0069e8761a4fa3b686b282060f297ec6af1128c2ec61afbaa6652d5bae877f0

  • SSDEEP

    6144:COfUwPXnZYB6WPs6jb9hvzNni6F/txK0gFo8qhSnK0G:ZUQXZheb95z9i6F/trgFo82QKp

Score
10/10
redlinesectopratusamoneyinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

usamoney

C2

45.142.215.47:27643

Attributes
  • auth_value

    9491a1c5e11eb6097e68a4fa8627fda8

Targets

    • Target

      c80f43e46ab57da6be664ef0175c4ba4_JaffaCakes118

    • Size

      366KB

    • MD5

      c80f43e46ab57da6be664ef0175c4ba4

    • SHA1

      5adc22e302c9e4d51c9963138f22fb5b69cad500

    • SHA256

      99e62cbc82f17ed961e5e0ba0e291863d70868e018ae1d78c00162a799f3f483

    • SHA512

      8531f7ea9f17f6e9e3f8aec72db2526d607bb3b24651b932b5180e6e5ea727a3a0069e8761a4fa3b686b282060f297ec6af1128c2ec61afbaa6652d5bae877f0

    • SSDEEP

      6144:COfUwPXnZYB6WPs6jb9hvzNni6F/txK0gFo8qhSnK0G:ZUQXZheb95z9i6F/trgFo82QKp

    Score
    10/10
    redlinesectopratusamoneyinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks