Overview

overview

10

Static

static

3

5a45e957b7...98.exe

windows7-x64

5a45e957b7...98.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5a45e957b78096b463a8b4b2f7001698

  • Size

    312KB

  • Sample

    231219-tp7nwaefd2

  • MD5

    5a45e957b78096b463a8b4b2f7001698

  • SHA1

    af4a3a8943bdfa146eed3ce78dc4e9acd37d9abe

  • SHA256

    f663c1cc7ae4c689505e8e73d7faf48975785c81a4f27bd5f6be2d187a3590fb

  • SHA512

    2e89e3cd545858e3b61ebf942154d2e9b982a5adbc9b0263764c80886920c1c617e0e96677937e8ea5aa8f93863b96fa592f51123d51f1c77b3db36467ac0aa2

  • SSDEEP

    6144:goxeAWHePvxmIfjBZJlhi5ZSlptcs+hvajfTZJjZS:g8M+3xmIJlhi5Z6c9hvajdO

Score
10/10
redlinesectopratbuildinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

build

C2

185.244.182.136:51832

Attributes
  • auth_value

    275ce2c87153d4e8e3cc276c686a93de

Targets

    • Target

      5a45e957b78096b463a8b4b2f7001698

    • Size

      312KB

    • MD5

      5a45e957b78096b463a8b4b2f7001698

    • SHA1

      af4a3a8943bdfa146eed3ce78dc4e9acd37d9abe

    • SHA256

      f663c1cc7ae4c689505e8e73d7faf48975785c81a4f27bd5f6be2d187a3590fb

    • SHA512

      2e89e3cd545858e3b61ebf942154d2e9b982a5adbc9b0263764c80886920c1c617e0e96677937e8ea5aa8f93863b96fa592f51123d51f1c77b3db36467ac0aa2

    • SSDEEP

      6144:goxeAWHePvxmIfjBZJlhi5ZSlptcs+hvajfTZJjZS:g8M+3xmIJlhi5Z6c9hvajdO

    Score
    10/10
    redlinesectopratbuildinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks