Overview

overview

10

Static

static

10

build.exe

windows7-x64

10

build.exe

windows10-2004-x64

10

User tags

Assigned on submission by the user, not by sandbox detections.

source:threatview.io

Sharing

Copy URL
Twitter E-mail

General

  • Target

    build.exe

  • Size

    95KB

  • Sample

    230412-md1b4abe94

  • MD5

    536a198ea9f67dc3403b894d2e4e5fc4

  • SHA1

    82ca68f5d10ab1baeeaae042bb0fac595db10ea0

  • SHA256

    5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee

  • SHA512

    de8fd56a76b64076ee66ee69b361f2616f8fc668f819b4173e824568844d872e9782ac7d210bc69703d373e19fe9e43bff61668f904238e8899aa1f5a782f768

  • SSDEEP

    1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed243teulgS6pY:rAMOY3+zi0ZbYe1g0ujyzdGY

Score
10/10
redlinesectopratcheatinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

135.148.89.82:60386

Targets

    • Target

      build.exe

    • Size

      95KB

    • MD5

      536a198ea9f67dc3403b894d2e4e5fc4

    • SHA1

      82ca68f5d10ab1baeeaae042bb0fac595db10ea0

    • SHA256

      5112ff1b75d9c33d10efafcbacdb4e2116280c1f5f3e6b6a64b44279997d96ee

    • SHA512

      de8fd56a76b64076ee66ee69b361f2616f8fc668f819b4173e824568844d872e9782ac7d210bc69703d373e19fe9e43bff61668f904238e8899aa1f5a782f768

    • SSDEEP

      1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed243teulgS6pY:rAMOY3+zi0ZbYe1g0ujyzdGY

    Score
    10/10
    redlinesectopratcheatinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks