Overview

overview

10

Static

static

1

169441f77b...18.exe

windows7-x64

10

169441f77b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    169441f77be08d744d5a3c470cba54de_JaffaCakes118

  • Size

    378KB

  • Sample

    240627-s79eraybph

  • MD5

    169441f77be08d744d5a3c470cba54de

  • SHA1

    9a2cdd4b6646902e033470abc659696ef5476b3a

  • SHA256

    dbeb77768d887fa33ddb417e397b2bf2992748d6c7d618b907cb6a955337f113

  • SHA512

    160ce2428b29c37cb24db34c1dfefe212fc2cb74ae793373b0de1eb9a38da4adeb3590945884ef589ba0d8fd24a7672eb4d47e25143d714c64bfb64d71d85215

  • SSDEEP

    6144:Fry6wBK8O0e0nG7RP729lkszXNEohb7AHKROhxxpeTr/ekIfsu:86wBK8Pe0netwlksruwmzxp6LMsu

Score
10/10
redlinesectoprat2infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

2

C2

80.87.192.249:16640

Targets

    • Target

      169441f77be08d744d5a3c470cba54de_JaffaCakes118

    • Size

      378KB

    • MD5

      169441f77be08d744d5a3c470cba54de

    • SHA1

      9a2cdd4b6646902e033470abc659696ef5476b3a

    • SHA256

      dbeb77768d887fa33ddb417e397b2bf2992748d6c7d618b907cb6a955337f113

    • SHA512

      160ce2428b29c37cb24db34c1dfefe212fc2cb74ae793373b0de1eb9a38da4adeb3590945884ef589ba0d8fd24a7672eb4d47e25143d714c64bfb64d71d85215

    • SSDEEP

      6144:Fry6wBK8O0e0nG7RP729lkszXNEohb7AHKROhxxpeTr/ekIfsu:86wBK8Pe0netwlksruwmzxp6LMsu

    Score
    10/10
    redlinesectoprat2infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks