Overview

overview

10

Static

static

3

809a5c6cef...11.exe

windows7-x64

10

809a5c6cef...11.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    809a5c6cef4dc6200f0e2fffa8c4f311

  • Size

    390KB

  • Sample

    231219-xw36taahbr

  • MD5

    809a5c6cef4dc6200f0e2fffa8c4f311

  • SHA1

    916bad004c711c1a8b309412596a29f3b99e5fe8

  • SHA256

    b86ef6990c59e33deca76103b740084871993a9c417b2b802c608c7604ea8b25

  • SHA512

    72724d13367b01c08a3f7d843b178b2e23a7cd199660fa4248eac03383dbcb0c896c1a8d0f57ff11b1a616d1bc76eb329e165c05fd64d260be4c4c3150a8be0c

  • SSDEEP

    6144:aB088cxeLrFkWmKnWcMzH9xLZ9c6T/vSng5Pd6/ZBfRGgROhxxpeTr/ekI:a04ePFkPLBxLZNPsBmzxp6L

Score
10/10
redlinesectopratpaladininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

178.63.26.132:29795

Targets

    • Target

      809a5c6cef4dc6200f0e2fffa8c4f311

    • Size

      390KB

    • MD5

      809a5c6cef4dc6200f0e2fffa8c4f311

    • SHA1

      916bad004c711c1a8b309412596a29f3b99e5fe8

    • SHA256

      b86ef6990c59e33deca76103b740084871993a9c417b2b802c608c7604ea8b25

    • SHA512

      72724d13367b01c08a3f7d843b178b2e23a7cd199660fa4248eac03383dbcb0c896c1a8d0f57ff11b1a616d1bc76eb329e165c05fd64d260be4c4c3150a8be0c

    • SSDEEP

      6144:aB088cxeLrFkWmKnWcMzH9xLZ9c6T/vSng5Pd6/ZBfRGgROhxxpeTr/ekI:a04ePFkPLBxLZNPsBmzxp6L

    Score
    10/10
    redlinesectopratpaladininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks