Overview

overview

10

Static

static

3

d413e26246...18.exe

windows7-x64

10

d413e26246...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d413e26246b1c3d468ed552bfc2bb68d_JaffaCakes118

  • Size

    426KB

  • Sample

    240405-pzba7scd9t

  • MD5

    d413e26246b1c3d468ed552bfc2bb68d

  • SHA1

    cd197afa3b8af79ff8c42a216b738834c93692eb

  • SHA256

    1264cf244122e6f9ca638a4c0c0add87457935e62018aea97efe9d797f9a0c76

  • SHA512

    d6ba65b1b0496f450db7e524d45a565fd0a4bb27fe75b5ebab25122c158d412e53e9805097da540b436bae2d7efa867f8ce0f57016d05b58c1c35ada221e8c5a

  • SSDEEP

    12288:l/+We8D7L4Tjjr3c87U/lQ67XaAnomhi4:l/tboTz3j67XvQ

Score
10/10
redlinesectopratpaladininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

37.228.129.48:29795

Attributes
  • auth_value

    f27db372188045eefdf974196ead3dae

Targets

    • Target

      d413e26246b1c3d468ed552bfc2bb68d_JaffaCakes118

    • Size

      426KB

    • MD5

      d413e26246b1c3d468ed552bfc2bb68d

    • SHA1

      cd197afa3b8af79ff8c42a216b738834c93692eb

    • SHA256

      1264cf244122e6f9ca638a4c0c0add87457935e62018aea97efe9d797f9a0c76

    • SHA512

      d6ba65b1b0496f450db7e524d45a565fd0a4bb27fe75b5ebab25122c158d412e53e9805097da540b436bae2d7efa867f8ce0f57016d05b58c1c35ada221e8c5a

    • SSDEEP

      12288:l/+We8D7L4Tjjr3c87U/lQ67XaAnomhi4:l/tboTz3j67XvQ

    Score
    10/10
    redlinesectopratpaladininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks