Overview

overview

10

Static

static

3

74ed7dfb77...75.exe

windows7-x64

10

74ed7dfb77...75.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74ed7dfb777338f810c5ba2ff4dc8175

  • Size

    332KB

  • Sample

    231219-wxflgaebe2

  • MD5

    74ed7dfb777338f810c5ba2ff4dc8175

  • SHA1

    02fd61d4127242f513bcdd0ef9463ca5506a8f1d

  • SHA256

    416b0ecf28322374da442dc24501019de4af9a7d65731b2aaa20de36e08871b3

  • SHA512

    3e726dd9d1c8850145e53bfd1ae2832d12b7c73471ceb9e946472d6db2ceb35ac32d3b9f7a5fb38d9f82e10cd776b44d20a5fe03e7f425e1f0bb2d27a6f6a97f

  • SSDEEP

    6144:WowSDWHe/PxmJvjBZXR6a/ma6VSSSc41ZQO+ueabUQRzIyeWZC5:W13+HxmJnR6a/mrDkbCawQ5eR5

Score
10/10
redlinesectopratpaladininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

178.63.26.132:29795

Targets

    • Target

      74ed7dfb777338f810c5ba2ff4dc8175

    • Size

      332KB

    • MD5

      74ed7dfb777338f810c5ba2ff4dc8175

    • SHA1

      02fd61d4127242f513bcdd0ef9463ca5506a8f1d

    • SHA256

      416b0ecf28322374da442dc24501019de4af9a7d65731b2aaa20de36e08871b3

    • SHA512

      3e726dd9d1c8850145e53bfd1ae2832d12b7c73471ceb9e946472d6db2ceb35ac32d3b9f7a5fb38d9f82e10cd776b44d20a5fe03e7f425e1f0bb2d27a6f6a97f

    • SSDEEP

      6144:WowSDWHe/PxmJvjBZXR6a/ma6VSSSc41ZQO+ueabUQRzIyeWZC5:W13+HxmJnR6a/mrDkbCawQ5eR5

    Score
    10/10
    redlinesectopratpaladininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks