Overview

overview

10

Static

static

3

f57014ec71...18.exe

windows7-x64

10

f57014ec71...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f57014ec711002b637697be806394a3c_JaffaCakes118

  • Size

    389KB

  • Sample

    240417-k3jpjacb5x

  • MD5

    f57014ec711002b637697be806394a3c

  • SHA1

    bd34d56b9b685e3238552d69a733050268c9a921

  • SHA256

    09d58d081dd9364e99857ac273d52a17a0473cc64e64d0e15b2b9b2f67ef2d49

  • SHA512

    ed9d6ce7f2da002e409c10f8046d95b69800dfffbc9b8d8805cf26f136849bf471aa8c7fd2d9abecfb80cac8986ba1247ef0ad40bcc33e8e2b7da7245bfb6b0f

  • SSDEEP

    12288:sA3AHAI6tB+ysm4T68rbe0fsep3F5OBQTT04:sgI6tBpsmQreC7T04

Score
10/10
redlinesectopratsewpalpadininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      f57014ec711002b637697be806394a3c_JaffaCakes118

    • Size

      389KB

    • MD5

      f57014ec711002b637697be806394a3c

    • SHA1

      bd34d56b9b685e3238552d69a733050268c9a921

    • SHA256

      09d58d081dd9364e99857ac273d52a17a0473cc64e64d0e15b2b9b2f67ef2d49

    • SHA512

      ed9d6ce7f2da002e409c10f8046d95b69800dfffbc9b8d8805cf26f136849bf471aa8c7fd2d9abecfb80cac8986ba1247ef0ad40bcc33e8e2b7da7245bfb6b0f

    • SSDEEP

      12288:sA3AHAI6tB+ysm4T68rbe0fsep3F5OBQTT04:sgI6tBpsmQreC7T04

    Score
    10/10
    redlinesectopratsewpalpadininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks