Overview

overview

10

Static

static

3

fbe8504765...18.exe

windows7-x64

10

fbe8504765...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fbe8504765a6d958f37c375e4abb55ab_JaffaCakes118

  • Size

    766KB

  • Sample

    240420-ev99maha71

  • MD5

    fbe8504765a6d958f37c375e4abb55ab

  • SHA1

    516346c68d566c16fa5a08e62f163f7c538ad803

  • SHA256

    6ed80997e5e466ce27f1a7ce6f022d2985ca4fbb51b5440fd6440b2153bd1fd3

  • SHA512

    f1fb1c4bb8ee689bd23384e633f11f7baf793de14ed7442899b2629223038e67887edd7dc417caf0db1302a2250f951576c1e6c2646e76ce30a756ece26fdd00

  • SSDEEP

    12288:tvA1GwKfjqoUrR0+8HmwNbfEZN38Yo9rs+97eH1buP3fIGK2vSWN:tvoIfFUIW+ls2V

Score
10/10
redlinesectoprat@siril228infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

@siril228

C2

176.57.71.68:37814

Attributes
  • auth_value

    6e134fbe11e1fba7052c029b94245b55

Targets

    • Target

      fbe8504765a6d958f37c375e4abb55ab_JaffaCakes118

    • Size

      766KB

    • MD5

      fbe8504765a6d958f37c375e4abb55ab

    • SHA1

      516346c68d566c16fa5a08e62f163f7c538ad803

    • SHA256

      6ed80997e5e466ce27f1a7ce6f022d2985ca4fbb51b5440fd6440b2153bd1fd3

    • SHA512

      f1fb1c4bb8ee689bd23384e633f11f7baf793de14ed7442899b2629223038e67887edd7dc417caf0db1302a2250f951576c1e6c2646e76ce30a756ece26fdd00

    • SSDEEP

      12288:tvA1GwKfjqoUrR0+8HmwNbfEZN38Yo9rs+97eH1buP3fIGK2vSWN:tvoIfFUIW+ls2V

    Score
    10/10
    redlinesectoprat@siril228infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks