Overview

overview

10

Static

static

3

ce26cd31b5...52.exe

windows7-x64

10

ce26cd31b5...52.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce26cd31b5146a58d98177af762fa852

  • Size

    278KB

  • Sample

    231220-r9a5asbbg9

  • MD5

    ce26cd31b5146a58d98177af762fa852

  • SHA1

    1fcc748de0f244582d21ba7a4a073d75800ee661

  • SHA256

    247385a9d35a6fe63d06a0d672580f98cfb85dac3fb9fe072fe79c84e22be6a1

  • SHA512

    f5d2fd73f03bba33d3eb275d7d18de8dfe34e5277d3b3ebf49c7a20e7df84a0902250708227925dad397789c092676af0fb23273724931ae5ae2e70c72a049ce

  • SSDEEP

    6144:XCx+1K3h3LqJ6KYPD0JqfG0Vx98aClY6E:Q+1K3SaDqq7H81

Score
10/10
redlinesectopratusamoneyinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

usamoney

C2

45.142.215.47:27643

Attributes
  • auth_value

    9491a1c5e11eb6097e68a4fa8627fda8

Targets

    • Target

      ce26cd31b5146a58d98177af762fa852

    • Size

      278KB

    • MD5

      ce26cd31b5146a58d98177af762fa852

    • SHA1

      1fcc748de0f244582d21ba7a4a073d75800ee661

    • SHA256

      247385a9d35a6fe63d06a0d672580f98cfb85dac3fb9fe072fe79c84e22be6a1

    • SHA512

      f5d2fd73f03bba33d3eb275d7d18de8dfe34e5277d3b3ebf49c7a20e7df84a0902250708227925dad397789c092676af0fb23273724931ae5ae2e70c72a049ce

    • SSDEEP

      6144:XCx+1K3h3LqJ6KYPD0JqfG0Vx98aClY6E:Q+1K3SaDqq7H81

    Score
    10/10
    redlinesectopratusamoneyinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks