Overview

overview

10

Static

static

3

fbf14e58c9...18.exe

windows7-x64

10

fbf14e58c9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fbf14e58c92c9c12fe1defb0fb646017_JaffaCakes118

  • Size

    395KB

  • Sample

    240420-e9efhahd9y

  • MD5

    fbf14e58c92c9c12fe1defb0fb646017

  • SHA1

    f2e14a1da1e8cc9f6ae94ed0cdde3e906e47e4af

  • SHA256

    caa60a2c9884ffd88b4f45d8b99cc61b1883ec4e72750fae9e5e3ddb6e1ee4a6

  • SHA512

    0ecfede45afb1fd7e25233ca8afaacd9e56315344bb34c167ceefa2326ac6ca97cdef6ea2106da6ab74f0214fb9370e46485617b77b33e588805a42eb35a2acb

  • SSDEEP

    6144:Dt6LhtxHq+gmNj/wseEesEtFw45YeuJ3WHyvOlurIanX59EPCmK:Q9q+tGEfEt1e89lTaX59Y

Score
10/10
redlinesectoprat3108infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

3108

C2

95.217.77.23:53845

Targets

    • Target

      fbf14e58c92c9c12fe1defb0fb646017_JaffaCakes118

    • Size

      395KB

    • MD5

      fbf14e58c92c9c12fe1defb0fb646017

    • SHA1

      f2e14a1da1e8cc9f6ae94ed0cdde3e906e47e4af

    • SHA256

      caa60a2c9884ffd88b4f45d8b99cc61b1883ec4e72750fae9e5e3ddb6e1ee4a6

    • SHA512

      0ecfede45afb1fd7e25233ca8afaacd9e56315344bb34c167ceefa2326ac6ca97cdef6ea2106da6ab74f0214fb9370e46485617b77b33e588805a42eb35a2acb

    • SSDEEP

      6144:Dt6LhtxHq+gmNj/wseEesEtFw45YeuJ3WHyvOlurIanX59EPCmK:Q9q+tGEfEt1e89lTaX59Y

    Score
    10/10
    redlinesectoprat3108infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks