Overview

overview

10

Static

static

3

d9427a75a8...18.exe

windows7-x64

10

d9427a75a8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9427a75a8616e1f6cdca86bc18f308c_JaffaCakes118

  • Size

    417KB

  • Sample

    240405-vbqzmshg75

  • MD5

    d9427a75a8616e1f6cdca86bc18f308c

  • SHA1

    837653ef2697b55845e4bb0ac4c6d3326c00fd66

  • SHA256

    a3556fbc01c6ee0a9e08e1a2ea6ea6d4e9e93802d555bf5e21cb8796f46384cb

  • SHA512

    56b15ec936b356188fe2c43c17dae428b185e0fd2a19d6ea4ab84a4da1364c9940119b2506eb5e7f4cd85609e61477b707b7daf3b2557a23864c23587d9e9fd4

  • SSDEEP

    12288:Drk9G2/lMUXSNKenXHLXdyOmoD25kSRLm:DYg2/iBNjXdmoD2bm

Score
10/10
redlinesectopratutsinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.182:52236

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      d9427a75a8616e1f6cdca86bc18f308c_JaffaCakes118

    • Size

      417KB

    • MD5

      d9427a75a8616e1f6cdca86bc18f308c

    • SHA1

      837653ef2697b55845e4bb0ac4c6d3326c00fd66

    • SHA256

      a3556fbc01c6ee0a9e08e1a2ea6ea6d4e9e93802d555bf5e21cb8796f46384cb

    • SHA512

      56b15ec936b356188fe2c43c17dae428b185e0fd2a19d6ea4ab84a4da1364c9940119b2506eb5e7f4cd85609e61477b707b7daf3b2557a23864c23587d9e9fd4

    • SSDEEP

      12288:Drk9G2/lMUXSNKenXHLXdyOmoD25kSRLm:DYg2/iBNjXdmoD2bm

    Score
    10/10
    redlinesectopratutsinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks