Overview

overview

10

Static

static

3

9d2ac37817...27.exe

windows7-x64

10

9d2ac37817...27.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9d2ac378174e9aec61c3919349b05427

  • Size

    384KB

  • Sample

    231219-zs4dhsagdr

  • MD5

    9d2ac378174e9aec61c3919349b05427

  • SHA1

    46baffa0e5eeeee47fea77c36dbd257ab464e020

  • SHA256

    4af41ec359282239d36e94c64676509aca790b869c5df305940c923113135292

  • SHA512

    bbd1fa326d5959552fac1c122be1abc17602fda252a47fabd0bd43d762982cb2e52f7740084b8acc518877de13aad95d0aaef80eabd850271421ae4afaf1a72e

  • SSDEEP

    6144:U2Mj6T1EUyMr7Vvah200/wuucq4EanL6S3vTeU6nP0X37BHY5eeTGX:xPYMr7Vva50/nun5anuS37unPCBHyz+

Score
10/10
redlinesectopratsewpalpinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

sewPalp

C2

185.215.113.29:24645

Attributes
  • auth_value

    41d3df6d093b1e36993abf16af0d6f2d

Targets

    • Target

      9d2ac378174e9aec61c3919349b05427

    • Size

      384KB

    • MD5

      9d2ac378174e9aec61c3919349b05427

    • SHA1

      46baffa0e5eeeee47fea77c36dbd257ab464e020

    • SHA256

      4af41ec359282239d36e94c64676509aca790b869c5df305940c923113135292

    • SHA512

      bbd1fa326d5959552fac1c122be1abc17602fda252a47fabd0bd43d762982cb2e52f7740084b8acc518877de13aad95d0aaef80eabd850271421ae4afaf1a72e

    • SSDEEP

      6144:U2Mj6T1EUyMr7Vvah200/wuucq4EanL6S3vTeU6nP0X37BHY5eeTGX:xPYMr7Vva50/nun5anuS37unPCBHyz+

    Score
    10/10
    redlinesectopratsewpalpinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks