Overview

overview

10

Static

static

10

fd3b745c27...18.exe

windows7-x64

10

fd3b745c27...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd3b745c27f7adfb6cd4fc67dc0ab913_JaffaCakes118

  • Size

    98KB

  • Sample

    240420-vtnbgade22

  • MD5

    fd3b745c27f7adfb6cd4fc67dc0ab913

  • SHA1

    9dac76c95d0be77f19da9aac0cc626ceaf27de13

  • SHA256

    a84ded1b7c24e9db84db30fd9a0e7ab189cfb14c90452d95db12f20b9360c583

  • SHA512

    706758e345536f361bc3f4c8cbd6089bd73ea15f8e3e50912b655dac551014c73b90dbe6e53026624a2540c1ccdd13ab4e4497584028a4f0864de01f4643abc7

  • SSDEEP

    1536:aW3LNmocOwYT2tfmmPF1CIJFMsmbfexvTufUyyedgm3/qCxXsECG6ijoigz:9xmocuuJ2hgTuMyzdaSnU

Score
10/10
redlinesectoprat884967607infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

884967607

C2

188.40.193.166:43180

Targets

    • Target

      fd3b745c27f7adfb6cd4fc67dc0ab913_JaffaCakes118

    • Size

      98KB

    • MD5

      fd3b745c27f7adfb6cd4fc67dc0ab913

    • SHA1

      9dac76c95d0be77f19da9aac0cc626ceaf27de13

    • SHA256

      a84ded1b7c24e9db84db30fd9a0e7ab189cfb14c90452d95db12f20b9360c583

    • SHA512

      706758e345536f361bc3f4c8cbd6089bd73ea15f8e3e50912b655dac551014c73b90dbe6e53026624a2540c1ccdd13ab4e4497584028a4f0864de01f4643abc7

    • SSDEEP

      1536:aW3LNmocOwYT2tfmmPF1CIJFMsmbfexvTufUyyedgm3/qCxXsECG6ijoigz:9xmocuuJ2hgTuMyzdaSnU

    Score
    10/10
    redlinesectoprat884967607infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks