Overview

overview

10

Static

static

3

9c10e064b9...20.exe

windows7-x64

10

9c10e064b9...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9c10e064b91ff0da31abfeaac30c7120

  • Size

    377KB

  • Sample

    231219-zqvctsdbg8

  • MD5

    9c10e064b91ff0da31abfeaac30c7120

  • SHA1

    b6aaa01896d4fab33b3f307bd57bc2311cadadb8

  • SHA256

    22663e3cd36c26cc631939a53bc62d238475651b562397b204f96a832ef7a27f

  • SHA512

    1534594f8ddd9470e4d70b73c51d1f491643fad9a980e8f1b128fd81b0e0aba80c7b41c4a065122496e02097c8436d1b8e661bc74aa8d8368c251fc89b15d961

  • SSDEEP

    6144:JEcB02fHjd7a/2PewXcGWSBKVSKH+UibQnxWcf:q52fHB2SewMGWS0YKHSbQnh

Score
10/10
redlinesectopratbuildinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

build

C2

185.244.182.136:51832

Attributes
  • auth_value

    275ce2c87153d4e8e3cc276c686a93de

Targets

    • Target

      9c10e064b91ff0da31abfeaac30c7120

    • Size

      377KB

    • MD5

      9c10e064b91ff0da31abfeaac30c7120

    • SHA1

      b6aaa01896d4fab33b3f307bd57bc2311cadadb8

    • SHA256

      22663e3cd36c26cc631939a53bc62d238475651b562397b204f96a832ef7a27f

    • SHA512

      1534594f8ddd9470e4d70b73c51d1f491643fad9a980e8f1b128fd81b0e0aba80c7b41c4a065122496e02097c8436d1b8e661bc74aa8d8368c251fc89b15d961

    • SSDEEP

      6144:JEcB02fHjd7a/2PewXcGWSBKVSKH+UibQnxWcf:q52fHB2SewMGWS0YKHSbQnh

    Score
    10/10
    redlinesectopratbuildinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks