Overview

overview

10

Static

static

3

cae816cfbc...32.exe

windows7-x64

10

cae816cfbc...32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cae816cfbc219861bb96ebe7f8ae8732

  • Size

    313KB

  • Sample

    231220-r2kc1agha3

  • MD5

    cae816cfbc219861bb96ebe7f8ae8732

  • SHA1

    9880a4e0d4db0824c13425a01af99042634e91bc

  • SHA256

    e3f902602edc1183154d4d93071a4311fa201eea69efd377ddfc8071e9802180

  • SHA512

    1ab91dafac40132bc8fe311516b880f304d84b96d96d5ca4a67267ecd151c6c0c9ec65a9b0eb4b6eea05c7c8377f04b4b8404a67152a9df47824c5ee0c69d6df

  • SSDEEP

    6144:We+tFeY7oybsLsO/uihb12zmvOpCkLmo+a5K8yAjIZWhT6KBQt9:WF3/7oyc/emELmo7KBAjZT6KBm

Score
10/10
redlinesectopratutsinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.20:13441

Targets

    • Target

      cae816cfbc219861bb96ebe7f8ae8732

    • Size

      313KB

    • MD5

      cae816cfbc219861bb96ebe7f8ae8732

    • SHA1

      9880a4e0d4db0824c13425a01af99042634e91bc

    • SHA256

      e3f902602edc1183154d4d93071a4311fa201eea69efd377ddfc8071e9802180

    • SHA512

      1ab91dafac40132bc8fe311516b880f304d84b96d96d5ca4a67267ecd151c6c0c9ec65a9b0eb4b6eea05c7c8377f04b4b8404a67152a9df47824c5ee0c69d6df

    • SSDEEP

      6144:We+tFeY7oybsLsO/uihb12zmvOpCkLmo+a5K8yAjIZWhT6KBQt9:WF3/7oyc/emELmo7KBAjZT6KBm

    Score
    10/10
    redlinesectopratutsinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks