Overview

overview

10

Static

static

3

ddc5e39d92...18.exe

windows7-x64

10

ddc5e39d92...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ddc5e39d921c21e00aab97fbf1c5a9a9_JaffaCakes118

  • Size

    384KB

  • Sample

    240406-heq3lacg3y

  • MD5

    ddc5e39d921c21e00aab97fbf1c5a9a9

  • SHA1

    9e038f28547520c97ccf8fdac0e73cf40602e7dd

  • SHA256

    b39700643a49b34390a19ee86bf2589e9b8ae96467526f096f5ad50c9788b5ee

  • SHA512

    c290639f2d0dda3dcd3350879b84238b1a11585f3b7bf63ebfa8fefecea930058d678a88f3fba678a8c3c4a7605a7dfb3410cd96abf8422168813d572aedc123

  • SSDEEP

    6144:wMJSOG58rxWWuw52qrEoIP2vemenPPbBbSZ2NdxGn/dsqU:wAM8W6EfP22lnPPNi2NzG/djU

Score
10/10
redlinesectopratusamoneyinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

usamoney

C2

45.142.215.47:27643

Attributes
  • auth_value

    9491a1c5e11eb6097e68a4fa8627fda8

Targets

    • Target

      ddc5e39d921c21e00aab97fbf1c5a9a9_JaffaCakes118

    • Size

      384KB

    • MD5

      ddc5e39d921c21e00aab97fbf1c5a9a9

    • SHA1

      9e038f28547520c97ccf8fdac0e73cf40602e7dd

    • SHA256

      b39700643a49b34390a19ee86bf2589e9b8ae96467526f096f5ad50c9788b5ee

    • SHA512

      c290639f2d0dda3dcd3350879b84238b1a11585f3b7bf63ebfa8fefecea930058d678a88f3fba678a8c3c4a7605a7dfb3410cd96abf8422168813d572aedc123

    • SSDEEP

      6144:wMJSOG58rxWWuw52qrEoIP2vemenPPbBbSZ2NdxGn/dsqU:wAM8W6EfP22lnPPNi2NzG/djU

    Score
    10/10
    redlinesectopratusamoneyinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks