Overview

overview

10

Static

static

1

109279ed87...54.exe

windows7-x64

10

109279ed87...54.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    109279ed8728290224d0ea7799605d54

  • Size

    427KB

  • Sample

    231219-m8246sbef7

  • MD5

    109279ed8728290224d0ea7799605d54

  • SHA1

    c3855691de33953c2fc422e3b2ae6f2413f3a2ea

  • SHA256

    9ed6542a8e06b28c88a085b28e7f9905f931a36e86000429622c50811293650c

  • SHA512

    6a5abe8bb7e76aac55e471f9c19265b6f82621bbe263bb60d164b2e8bcb140e06c09cb19ec775306d5d64529c1f60193d73aef4473c08336beac898584b92891

  • SSDEEP

    6144:7Bb2yP34SMQ1scFNT/qwNHZbInDWHgjzjd5NabOqGJLaYHJUA4Yx47fjqsu:Fr3vnWqZADSgjXnNabO5L7JUA4wifGsu

Score
10/10
redlinesectoprat4infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

4

C2

80.87.192.249:16640

Attributes
  • auth_value

    3e4c638c72124e45bcf5164456741cce

Targets

    • Target

      109279ed8728290224d0ea7799605d54

    • Size

      427KB

    • MD5

      109279ed8728290224d0ea7799605d54

    • SHA1

      c3855691de33953c2fc422e3b2ae6f2413f3a2ea

    • SHA256

      9ed6542a8e06b28c88a085b28e7f9905f931a36e86000429622c50811293650c

    • SHA512

      6a5abe8bb7e76aac55e471f9c19265b6f82621bbe263bb60d164b2e8bcb140e06c09cb19ec775306d5d64529c1f60193d73aef4473c08336beac898584b92891

    • SSDEEP

      6144:7Bb2yP34SMQ1scFNT/qwNHZbInDWHgjzjd5NabOqGJLaYHJUA4Yx47fjqsu:Fr3vnWqZADSgjXnNabO5L7JUA4wifGsu

    Score
    10/10
    redlinesectoprat4infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks