Overview

overview

10

Static

static

3

f62966172c...18.exe

windows7-x64

10

f62966172c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f62966172cbcab72485b9d60a6d1ebe2_JaffaCakes118

  • Size

    384KB

  • Sample

    240417-tlr41sgd5w

  • MD5

    f62966172cbcab72485b9d60a6d1ebe2

  • SHA1

    307dd6355f9973ca40b49af44c1c4d574971ac2d

  • SHA256

    3cee0ca673fcfddea6373a5ccd630010b39c92262df96a18822814b35116e347

  • SHA512

    d2f0c482dabac6d58ef155e6be2dfaa98bd28ebfb24e0762a2fc52c9353aa6e28221b568fc3a09fc1b11f01fb6346a20527a57c687301b6900961e428e20a60c

  • SSDEEP

    6144:D7GDA4N8MqxiJ8xPZ9hZgWeSh9Vyl+lbEJ4NT8G+FcopeVx98aC3uMrIGfg:u8udCJZ/ZgWeAlbM1RFcxH8nuMr/fg

Score
10/10
redlinesectoprat1infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

1

C2

91.211.251.200:52562

Attributes
  • auth_value

    91d6bf9742ab82b32b059150e73000b0

Targets

    • Target

      f62966172cbcab72485b9d60a6d1ebe2_JaffaCakes118

    • Size

      384KB

    • MD5

      f62966172cbcab72485b9d60a6d1ebe2

    • SHA1

      307dd6355f9973ca40b49af44c1c4d574971ac2d

    • SHA256

      3cee0ca673fcfddea6373a5ccd630010b39c92262df96a18822814b35116e347

    • SHA512

      d2f0c482dabac6d58ef155e6be2dfaa98bd28ebfb24e0762a2fc52c9353aa6e28221b568fc3a09fc1b11f01fb6346a20527a57c687301b6900961e428e20a60c

    • SSDEEP

      6144:D7GDA4N8MqxiJ8xPZ9hZgWeSh9Vyl+lbEJ4NT8G+FcopeVx98aC3uMrIGfg:u8udCJZ/ZgWeAlbM1RFcxH8nuMr/fg

    Score
    10/10
    redlinesectoprat1infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks