Overview

overview

10

Static

static

3

dd667ab0c1...18.exe

windows7-x64

10

dd667ab0c1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd667ab0c1702dbf45e053f787fd521f_JaffaCakes118

  • Size

    366KB

  • Sample

    240406-g3mveadb56

  • MD5

    dd667ab0c1702dbf45e053f787fd521f

  • SHA1

    8578b45448b3d83e1bfa5a0c4653f6999bcc0034

  • SHA256

    63aeea2e1788244b1b8fb656312a94129b390faf6aeca5f7b06f53e26a505825

  • SHA512

    7e9953b8fbd52f699646affbecc3ea9bf91f9b26d93139c8d0c3d2988adb22763809545f7cb2fcbe35057b6185c37e1305da4033db27682da379695a36daf5c9

  • SSDEEP

    6144:nRc2DNDMBl50qO3XKPK+Uh7ECNA3Oh/yhBcKCGEG7v5ofy1T:KuAF0P3XjtECu3Oh/yh7CGEGDWfy

Score
10/10
redlinesectopratshopinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

shop

C2

45.9.20.107:46187

Attributes
  • auth_value

    60c75f1e2d31f6bac6dd7edad67d8615

Targets

    • Target

      dd667ab0c1702dbf45e053f787fd521f_JaffaCakes118

    • Size

      366KB

    • MD5

      dd667ab0c1702dbf45e053f787fd521f

    • SHA1

      8578b45448b3d83e1bfa5a0c4653f6999bcc0034

    • SHA256

      63aeea2e1788244b1b8fb656312a94129b390faf6aeca5f7b06f53e26a505825

    • SHA512

      7e9953b8fbd52f699646affbecc3ea9bf91f9b26d93139c8d0c3d2988adb22763809545f7cb2fcbe35057b6185c37e1305da4033db27682da379695a36daf5c9

    • SSDEEP

      6144:nRc2DNDMBl50qO3XKPK+Uh7ECNA3Oh/yhBcKCGEG7v5ofy1T:KuAF0P3XjtECu3Oh/yh7CGEGDWfy

    Score
    10/10
    redlinesectopratshopinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks