Overview

overview

10

Static

static

3

ecc558e65e...18.exe

windows7-x64

10

ecc558e65e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ecc558e65e2571cd4f116fc088346378_JaffaCakes118

  • Size

    355KB

  • Sample

    240411-gaapdage21

  • MD5

    ecc558e65e2571cd4f116fc088346378

  • SHA1

    aee80d2500d6606ecdbea034f090a4f942be6845

  • SHA256

    fe9c07268700093813ccf0e6618b6956f5cebffcf4e1447a98fed71c50a3932d

  • SHA512

    a593040585b77fba784d16a45210664e8d27f17c829e9f481359256e804696ed4ab4b2256fb22be2c781b76c4782fd020d3bd3a5683b2088e008288b14be80d3

  • SSDEEP

    6144:tAVKutNHBkN80GKxiK2bU3PnyEGESTFES6wj5Klf/oTLpB6uHEN:SKutdBkN80GKxkA6JEwE+U/YdAukN

Score
10/10
redlinesectopratpubinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      ecc558e65e2571cd4f116fc088346378_JaffaCakes118

    • Size

      355KB

    • MD5

      ecc558e65e2571cd4f116fc088346378

    • SHA1

      aee80d2500d6606ecdbea034f090a4f942be6845

    • SHA256

      fe9c07268700093813ccf0e6618b6956f5cebffcf4e1447a98fed71c50a3932d

    • SHA512

      a593040585b77fba784d16a45210664e8d27f17c829e9f481359256e804696ed4ab4b2256fb22be2c781b76c4782fd020d3bd3a5683b2088e008288b14be80d3

    • SSDEEP

      6144:tAVKutNHBkN80GKxiK2bU3PnyEGESTFES6wj5Klf/oTLpB6uHEN:SKutdBkN80GKxkA6JEwE+U/YdAukN

    Score
    10/10
    redlinesectopratpubinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks