Overview

overview

10

Static

static

3

7743478a07...c2.exe

windows7-x64

10

7743478a07...c2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7743478a076ae9fe83cd8dc671cad3c2

  • Size

    350KB

  • Sample

    231219-w3qzdsfef5

  • MD5

    7743478a076ae9fe83cd8dc671cad3c2

  • SHA1

    e2fac0eab691aabafa3013771e8f64e7cd64abc8

  • SHA256

    f514407f818527a9e44dffd1d8f5430fbdd0cc7184601c9d47d925eb13363dcb

  • SHA512

    337046e72f48eef3322be83953aacaa08dc7206619c7c04023e8102e347db7f349424e6cd48f08c87a645802752e1f3f46ff7f7e72e069271a4a70a65a32bb73

  • SSDEEP

    6144:NoBGJvgvb0YcXeLOuh7wOcZKeQXck5OCE5+e7VPSj5iibGLzIyn0WQWuQFO2:NkA4vb0YcODGOcZIck50O5j2zln08e2

Score
10/10
redlinesectopratpaladininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

178.63.26.132:29795

Targets

    • Target

      7743478a076ae9fe83cd8dc671cad3c2

    • Size

      350KB

    • MD5

      7743478a076ae9fe83cd8dc671cad3c2

    • SHA1

      e2fac0eab691aabafa3013771e8f64e7cd64abc8

    • SHA256

      f514407f818527a9e44dffd1d8f5430fbdd0cc7184601c9d47d925eb13363dcb

    • SHA512

      337046e72f48eef3322be83953aacaa08dc7206619c7c04023e8102e347db7f349424e6cd48f08c87a645802752e1f3f46ff7f7e72e069271a4a70a65a32bb73

    • SSDEEP

      6144:NoBGJvgvb0YcXeLOuh7wOcZKeQXck5OCE5+e7VPSj5iibGLzIyn0WQWuQFO2:NkA4vb0YcODGOcZIck50O5j2zln08e2

    Score
    10/10
    redlinesectopratpaladininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks