Overview

overview

10

Static

static

3

fcdd77dba7...18.exe

windows7-x64

10

fcdd77dba7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fcdd77dba7b427ac7729c603f8a519e6_JaffaCakes118

  • Size

    366KB

  • Sample

    240420-qqgmasad3w

  • MD5

    fcdd77dba7b427ac7729c603f8a519e6

  • SHA1

    60755de60554309d1fe646438fbe54c8c039d9e7

  • SHA256

    9785de311528935c88dfb42eb2ada3ca68e53420196ba663b48d549b7543b62a

  • SHA512

    877595fd97f95f538858fe1e280efb40b88ebd3b5bbb114402524c57d1e5fa30ffa83c575e585070cd335b9df562bee3113be625d7501f7507aa9cb91de789f7

  • SSDEEP

    6144:loPdz7mVMEeD6YHx1Hr+NDuZKK/tBsNlwqOxtveu:SPoVMEeD6YHx4puZT/tUlwqqJeu

Score
10/10
redlinesectopratpubinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.182:52236

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      fcdd77dba7b427ac7729c603f8a519e6_JaffaCakes118

    • Size

      366KB

    • MD5

      fcdd77dba7b427ac7729c603f8a519e6

    • SHA1

      60755de60554309d1fe646438fbe54c8c039d9e7

    • SHA256

      9785de311528935c88dfb42eb2ada3ca68e53420196ba663b48d549b7543b62a

    • SHA512

      877595fd97f95f538858fe1e280efb40b88ebd3b5bbb114402524c57d1e5fa30ffa83c575e585070cd335b9df562bee3113be625d7501f7507aa9cb91de789f7

    • SSDEEP

      6144:loPdz7mVMEeD6YHx1Hr+NDuZKK/tBsNlwqOxtveu:SPoVMEeD6YHx4puZT/tUlwqqJeu

    Score
    10/10
    redlinesectopratpubinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks