Overview

overview

10

Static

static

3

73ed4dd896...9c.exe

windows7-x64

10

73ed4dd896...9c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    73ed4dd896cd8a8d2237a0b8194d1a9c

  • Size

    283KB

  • Sample

    231219-wt45nadfa5

  • MD5

    73ed4dd896cd8a8d2237a0b8194d1a9c

  • SHA1

    677f5c4a9aa2134a8a468b0d4387c17dd8494338

  • SHA256

    602a63c3374bcc9791c7f25aa6941aee4f23ed06424bf97d1d87647e093617f2

  • SHA512

    81c7f2c2af6f6c5eab84bc931522a58bde9464d7872468047472aa904486e7b5b1b1c02c6463b7a6bc1dfba7eb737f2f2cf70611f87e011b7595b0380e745edd

  • SSDEEP

    6144:Xc020dB6yA5choQavKneu6cPI1WguSz+8:/x6v5c1CseuJI1H+8

Score
10/10
redlinesectopratutsinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.20:13441

Targets

    • Target

      73ed4dd896cd8a8d2237a0b8194d1a9c

    • Size

      283KB

    • MD5

      73ed4dd896cd8a8d2237a0b8194d1a9c

    • SHA1

      677f5c4a9aa2134a8a468b0d4387c17dd8494338

    • SHA256

      602a63c3374bcc9791c7f25aa6941aee4f23ed06424bf97d1d87647e093617f2

    • SHA512

      81c7f2c2af6f6c5eab84bc931522a58bde9464d7872468047472aa904486e7b5b1b1c02c6463b7a6bc1dfba7eb737f2f2cf70611f87e011b7595b0380e745edd

    • SSDEEP

      6144:Xc020dB6yA5choQavKneu6cPI1WguSz+8:/x6v5c1CseuJI1H+8

    Score
    10/10
    redlinesectopratutsinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks