Overview

overview

10

Static

static

3

8fcb3bbb57...d5.exe

windows7-x64

10

8fcb3bbb57...d5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8fcb3bbb57fa860a37da5cc9249dbbd5

  • Size

    389KB

  • Sample

    231219-yy7sfsdgb9

  • MD5

    8fcb3bbb57fa860a37da5cc9249dbbd5

  • SHA1

    fc94b87714b7b04c973b2c76472ef7ad31b5a77e

  • SHA256

    ae4e86797fd91e9bef807f0bd822d0c77f37b03e20eec889bc0ae9f9af738b32

  • SHA512

    815b3223bd7ec620c374a1f82483db1b40c93c278f0eb6513980530b7f7bbfce79e272aaa44606b78eb1d32549b9edc7b5bba2436ff949ad212f0cc0d6160b17

  • SSDEEP

    6144:sOy8E8XvLCZrhE+Z0s4lH8wnT0+/vm8eGA8b1bcB18CmhMuL6MCOhxxFeTr/ekI:1eZrhEPse8wAOm8e2EhmhMuL6+zxF6L

Score
10/10
redlinesectopratutsinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.20:13441

Targets

    • Target

      8fcb3bbb57fa860a37da5cc9249dbbd5

    • Size

      389KB

    • MD5

      8fcb3bbb57fa860a37da5cc9249dbbd5

    • SHA1

      fc94b87714b7b04c973b2c76472ef7ad31b5a77e

    • SHA256

      ae4e86797fd91e9bef807f0bd822d0c77f37b03e20eec889bc0ae9f9af738b32

    • SHA512

      815b3223bd7ec620c374a1f82483db1b40c93c278f0eb6513980530b7f7bbfce79e272aaa44606b78eb1d32549b9edc7b5bba2436ff949ad212f0cc0d6160b17

    • SSDEEP

      6144:sOy8E8XvLCZrhE+Z0s4lH8wnT0+/vm8eGA8b1bcB18CmhMuL6MCOhxxFeTr/ekI:1eZrhEPse8wAOm8e2EhmhMuL6+zxF6L

    Score
    10/10
    redlinesectopratutsinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks