Overview

overview

10

Static

static

3

f53b6236f5...18.exe

windows7-x64

10

f53b6236f5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f53b6236f54493f083dde3ba0ae13f7f_JaffaCakes118

  • Size

    310KB

  • Sample

    240417-hrsryshh7y

  • MD5

    f53b6236f54493f083dde3ba0ae13f7f

  • SHA1

    8566b76d6d2d4eb79bbf4901fe6fd30d5a48de0f

  • SHA256

    4f67c306422ee1de08124b1f350f14b766760a8b87ff9ee6a32477feaf793c54

  • SHA512

    ee17c058ab1973cae5d01fb8c180d599f498ac7be24cc406f371cc292ee8dc6d831df1697f2936c89106da4a52864d061c6bb824ef5de96d494edf0308ce82a4

  • SSDEEP

    6144:wRH/AMLiFnDgWb/+3+kPxTRAnRwoOLRAQU4:wd/AMgnd/+3dP3ARwoOl3U

Score
10/10
redlinesectopratsewpalpadininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      f53b6236f54493f083dde3ba0ae13f7f_JaffaCakes118

    • Size

      310KB

    • MD5

      f53b6236f54493f083dde3ba0ae13f7f

    • SHA1

      8566b76d6d2d4eb79bbf4901fe6fd30d5a48de0f

    • SHA256

      4f67c306422ee1de08124b1f350f14b766760a8b87ff9ee6a32477feaf793c54

    • SHA512

      ee17c058ab1973cae5d01fb8c180d599f498ac7be24cc406f371cc292ee8dc6d831df1697f2936c89106da4a52864d061c6bb824ef5de96d494edf0308ce82a4

    • SSDEEP

      6144:wRH/AMLiFnDgWb/+3+kPxTRAnRwoOLRAQU4:wd/AMgnd/+3dP3ARwoOl3U

    Score
    10/10
    redlinesectopratsewpalpadininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks