Overview

overview

10

Static

static

3

cf4fd0c663...18.exe

windows7-x64

10

cf4fd0c663...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf4fd0c663a62b0b44c58dc996d3fcda_JaffaCakes118

  • Size

    406KB

  • Sample

    240405-ky6nhaga2y

  • MD5

    cf4fd0c663a62b0b44c58dc996d3fcda

  • SHA1

    6003dc5856c1ee530ce6d167d778790d60c070e7

  • SHA256

    821d0a635c1fc185ce75a5b494baf2c8f812d4e3f6856bce0c0ba40d30e7ca7d

  • SHA512

    70b73e0379de7792aac529ded59e739e5fd3986b1efe71e94b2ebd4c59fad18cd981609c2e90ecf5f7398792c3d5ffa074f390c3aa9459616594b45f0b88f526

  • SSDEEP

    12288:jEGlznJWjUXTm9F9laPwn14dLytIpupOmb:jEG/WKmH9kwBtIpu

Score
10/10
redlinesectopratsewpalpinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

sewPalp

C2

185.215.113.29:24645

Attributes
  • auth_value

    41d3df6d093b1e36993abf16af0d6f2d

Targets

    • Target

      cf4fd0c663a62b0b44c58dc996d3fcda_JaffaCakes118

    • Size

      406KB

    • MD5

      cf4fd0c663a62b0b44c58dc996d3fcda

    • SHA1

      6003dc5856c1ee530ce6d167d778790d60c070e7

    • SHA256

      821d0a635c1fc185ce75a5b494baf2c8f812d4e3f6856bce0c0ba40d30e7ca7d

    • SHA512

      70b73e0379de7792aac529ded59e739e5fd3986b1efe71e94b2ebd4c59fad18cd981609c2e90ecf5f7398792c3d5ffa074f390c3aa9459616594b45f0b88f526

    • SSDEEP

      12288:jEGlznJWjUXTm9F9laPwn14dLytIpupOmb:jEG/WKmH9kwBtIpu

    Score
    10/10
    redlinesectopratsewpalpinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks