Overview

overview

10

Static

static

3

cddf7f1858...9e.exe

windows7-x64

10

cddf7f1858...9e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cddf7f1858729023b7fac8c80ab5029e

  • Size

    332KB

  • Sample

    231220-r8rqnabac7

  • MD5

    cddf7f1858729023b7fac8c80ab5029e

  • SHA1

    931bf9c1fd50d0cdea37352cd96ff6d5aede7fbe

  • SHA256

    2353fa144018536d515e56c23125a10068fa313fa8515141c351fe070571e83e

  • SHA512

    7caaf92426f4cd897d75d99ce044444a9143f3d4aaf9ddcffb647f5b55f499c0b0ad1491cee9799c06bed93e8b83d86eb398d7f65a74f6e36944bd3f3857ce37

  • SSDEEP

    6144:L4ucwPQp0cbSOuWDnQADMKZzGxiyZWTC91xqAN1YwNMGZ:LjbA0cbSOukQADVvRYxqAHJMGZ

Score
10/10
redlinesectopratpaladininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

178.63.26.132:29795

Targets

    • Target

      cddf7f1858729023b7fac8c80ab5029e

    • Size

      332KB

    • MD5

      cddf7f1858729023b7fac8c80ab5029e

    • SHA1

      931bf9c1fd50d0cdea37352cd96ff6d5aede7fbe

    • SHA256

      2353fa144018536d515e56c23125a10068fa313fa8515141c351fe070571e83e

    • SHA512

      7caaf92426f4cd897d75d99ce044444a9143f3d4aaf9ddcffb647f5b55f499c0b0ad1491cee9799c06bed93e8b83d86eb398d7f65a74f6e36944bd3f3857ce37

    • SSDEEP

      6144:L4ucwPQp0cbSOuWDnQADMKZzGxiyZWTC91xqAN1YwNMGZ:LjbA0cbSOukQADVvRYxqAHJMGZ

    Score
    10/10
    redlinesectopratpaladininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks