Overview

overview

10

Static

static

3

f5cfa36afd...18.exe

windows7-x64

10

f5cfa36afd...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f5cfa36afd1bb57f98b10f4de6669c62_JaffaCakes118

  • Size

    281KB

  • Sample

    240417-p4dl5ahe4s

  • MD5

    f5cfa36afd1bb57f98b10f4de6669c62

  • SHA1

    38e6878b279b3c075592d703ad4ea1711af7b970

  • SHA256

    86bd8dfc10e29337bdd9b243dbaddcca32320c4704bb39eedba2991b08e1fa32

  • SHA512

    ff105116e36ae1312b81331bf9b1674013600723350baf0f71e2d9ee43d6e2ced2837f11e4e8d3c1c84a69d7f5bac620bf568c1dbad9dd30615b9522f775147b

  • SSDEEP

    3072:ZkB7o2pZnj8TVeUwLE4Rm1tvl/Z2XfZeuojbnnoTFDezdIULlCF5FIK7VK:S7oEiMR0tvlx2XsXjToTFeqULEtIz

Score
10/10
redlinesectoprat1infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

1

C2

205.185.119.191:18846

Targets

    • Target

      f5cfa36afd1bb57f98b10f4de6669c62_JaffaCakes118

    • Size

      281KB

    • MD5

      f5cfa36afd1bb57f98b10f4de6669c62

    • SHA1

      38e6878b279b3c075592d703ad4ea1711af7b970

    • SHA256

      86bd8dfc10e29337bdd9b243dbaddcca32320c4704bb39eedba2991b08e1fa32

    • SHA512

      ff105116e36ae1312b81331bf9b1674013600723350baf0f71e2d9ee43d6e2ced2837f11e4e8d3c1c84a69d7f5bac620bf568c1dbad9dd30615b9522f775147b

    • SSDEEP

      3072:ZkB7o2pZnj8TVeUwLE4Rm1tvl/Z2XfZeuojbnnoTFDezdIULlCF5FIK7VK:S7oEiMR0tvlx2XsXjToTFeqULEtIz

    Score
    10/10
    redlinesectoprat1infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks