Overview

overview

10

Static

static

3

b1cde24567...65.exe

windows7-x64

10

b1cde24567...65.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b1cde24567ac75313ea366fb9620ca65

  • Size

    353KB

  • Sample

    231219-11qytsedgp

  • MD5

    b1cde24567ac75313ea366fb9620ca65

  • SHA1

    b1909e72ed40d8e86ca76d0341bf2e6fc09da9cc

  • SHA256

    6b2aa6f21925a0427ebde2829192d9c9ff01f5eaec751366b18df4b0e77f06fd

  • SHA512

    043a6c08a1f3aa31e99aa21c086ad514e1e11919b1772068421334002f42cbe1eaeb8e6f6b042cd6eb04f6309f1fcdd71df4b1928aab92773cece0de2b7eff21

  • SSDEEP

    6144:XQWRZhTyPdC6SgoveUoRk1uK2DNXUnRsM7VRsRharClbML7B:XfDhyPdC/gLPRZZfM73w5VwN

Score
10/10
redlinesectopratpaladininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

178.63.26.132:29795

Targets

    • Target

      b1cde24567ac75313ea366fb9620ca65

    • Size

      353KB

    • MD5

      b1cde24567ac75313ea366fb9620ca65

    • SHA1

      b1909e72ed40d8e86ca76d0341bf2e6fc09da9cc

    • SHA256

      6b2aa6f21925a0427ebde2829192d9c9ff01f5eaec751366b18df4b0e77f06fd

    • SHA512

      043a6c08a1f3aa31e99aa21c086ad514e1e11919b1772068421334002f42cbe1eaeb8e6f6b042cd6eb04f6309f1fcdd71df4b1928aab92773cece0de2b7eff21

    • SSDEEP

      6144:XQWRZhTyPdC6SgoveUoRk1uK2DNXUnRsM7VRsRharClbML7B:XfDhyPdC/gLPRZZfM73w5VwN

    Score
    10/10
    redlinesectopratpaladininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks