Overview

overview

10

Static

static

3

732bbd74f1...a1.exe

windows7-x64

10

732bbd74f1...a1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    732bbd74f1f50470e590b624abc9e5a1

  • Size

    357KB

  • Sample

    231219-wr74jadbf5

  • MD5

    732bbd74f1f50470e590b624abc9e5a1

  • SHA1

    6b91d9d5ac3a5a845bb12f74a1a14529f26578f5

  • SHA256

    7b440bf2809f46380e48a7d4f5d8644f457734f628a5cd86cb07e8af17d03354

  • SHA512

    4a010de07ebbcec664d96695cf4fdbb1002d3eaabfb71bb046ad376d3023bb7d2b6c00707d02a2f1170b654b9f814194cd46b15f38af980073308e8e35b9e115

  • SSDEEP

    6144:WovmpxGsIW6W6v75sPJPjqX5eZGZraaTTbuWc7lR1MtukXWES:VOfjIW6WE75sVQ5ewZxTm1MtY

Score
10/10
redlinesectopratpaladininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

178.63.26.132:29795

Targets

    • Target

      732bbd74f1f50470e590b624abc9e5a1

    • Size

      357KB

    • MD5

      732bbd74f1f50470e590b624abc9e5a1

    • SHA1

      6b91d9d5ac3a5a845bb12f74a1a14529f26578f5

    • SHA256

      7b440bf2809f46380e48a7d4f5d8644f457734f628a5cd86cb07e8af17d03354

    • SHA512

      4a010de07ebbcec664d96695cf4fdbb1002d3eaabfb71bb046ad376d3023bb7d2b6c00707d02a2f1170b654b9f814194cd46b15f38af980073308e8e35b9e115

    • SSDEEP

      6144:WovmpxGsIW6W6v75sPJPjqX5eZGZraaTTbuWc7lR1MtukXWES:VOfjIW6WE75sVQ5ewZxTm1MtY

    Score
    10/10
    redlinesectopratpaladininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks