Overview

overview

10

Static

static

3

fe93c5fe74...18.exe

windows7-x64

10

fe93c5fe74...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fe93c5fe74a22965663e4b4ccad6ea2d_JaffaCakes118

  • Size

    347KB

  • Sample

    240421-ghc5gacg29

  • MD5

    fe93c5fe74a22965663e4b4ccad6ea2d

  • SHA1

    7a26f9e1acff81b46bd1019d310635a45b33a9e7

  • SHA256

    da4600d6878a458b193192bda83a1100dab22d892926db9c908b15d47bb6a56a

  • SHA512

    94a608e0ec447886243b025476ef1d674675b2330fbebb3e8f2109fcbebef41f187dafb93fbd0cbd7aa372d54884a2df24c54520d0aaa22fa57b1a5aa427892b

  • SSDEEP

    6144:stT945biUjHNGhBfBEtXeZjLHbtxc9bTzLBTu67ujw83EL5ZCd:m9cbiwtG/6tXeZjLbUl31S67ujw8UWd

Score
10/10
redlinesectoprattestinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

test

C2

193.56.146.78:51487

Targets

    • Target

      fe93c5fe74a22965663e4b4ccad6ea2d_JaffaCakes118

    • Size

      347KB

    • MD5

      fe93c5fe74a22965663e4b4ccad6ea2d

    • SHA1

      7a26f9e1acff81b46bd1019d310635a45b33a9e7

    • SHA256

      da4600d6878a458b193192bda83a1100dab22d892926db9c908b15d47bb6a56a

    • SHA512

      94a608e0ec447886243b025476ef1d674675b2330fbebb3e8f2109fcbebef41f187dafb93fbd0cbd7aa372d54884a2df24c54520d0aaa22fa57b1a5aa427892b

    • SSDEEP

      6144:stT945biUjHNGhBfBEtXeZjLHbtxc9bTzLBTu67ujw83EL5ZCd:m9cbiwtG/6tXeZjLbUl31S67ujw8UWd

    Score
    10/10
    redlinesectoprattestinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks