Overview

overview

10

Static

static

3

c8eb119f95...18.exe

windows7-x64

10

c8eb119f95...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8eb119f955333676050138ee5476fa7_JaffaCakes118

  • Size

    364KB

  • Sample

    240405-dgltfaae6w

  • MD5

    c8eb119f955333676050138ee5476fa7

  • SHA1

    df1399b8ad93341d126aa0b3f4e5926d03b96579

  • SHA256

    b399b662facb12f2ab8f3c90f5149ec64bfbd51094d213897161bd1def0142d9

  • SHA512

    dea0fb5c8d9eb4aaf6a7f4ca0fb74959f9a106d315d0b9da9e3b321562bd7caf06a772572e4f3feb98429e155261824676dd7f3799ad099cfebd2009afc41f2c

  • SSDEEP

    6144:eC5yhelOLsyhswAS+CTVsPl4qsq1haFygoa7b228lAVCIADG8el:ekyheysIswAaTmdKWgweCxD

Score
10/10
redlinesectopratpaladininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

188.68.201.6:10085

Attributes
  • auth_value

    f27db372188045eefdf974196ead3dae

Targets

    • Target

      c8eb119f955333676050138ee5476fa7_JaffaCakes118

    • Size

      364KB

    • MD5

      c8eb119f955333676050138ee5476fa7

    • SHA1

      df1399b8ad93341d126aa0b3f4e5926d03b96579

    • SHA256

      b399b662facb12f2ab8f3c90f5149ec64bfbd51094d213897161bd1def0142d9

    • SHA512

      dea0fb5c8d9eb4aaf6a7f4ca0fb74959f9a106d315d0b9da9e3b321562bd7caf06a772572e4f3feb98429e155261824676dd7f3799ad099cfebd2009afc41f2c

    • SSDEEP

      6144:eC5yhelOLsyhswAS+CTVsPl4qsq1haFygoa7b228lAVCIADG8el:ekyheysIswAaTmdKWgweCxD

    Score
    10/10
    redlinesectopratpaladininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks