Overview

overview

10

Static

static

3

2454476994...cd.exe

windows7-x64

10

2454476994...cd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2454476994609af00856aa853b389ecd

  • Size

    249KB

  • Sample

    231221-3dq2esacdr

  • MD5

    2454476994609af00856aa853b389ecd

  • SHA1

    d32134dfb0b48140f3c37c19776881c4cce0164b

  • SHA256

    6dc2e3a15222ed9491d47a2678e22365e723075bfcd020c6614d0eb23f6fa811

  • SHA512

    c0330f2885657d1002d0e6d7e00160e5febf829c303978fd6c53df74e4471eea0d7eaab2c99bdcc5dd4478b61a5fedf87f6a56ed2887b2924ad7127fdc522f9e

  • SSDEEP

    6144:ln7dv6/2Hg2ElRei0QhQjUcgfNKUCZ4ZJp:5BnHfKe78SpQVZ

Score
10/10
redlinesectopratutsinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.20:13441

Targets

    • Target

      2454476994609af00856aa853b389ecd

    • Size

      249KB

    • MD5

      2454476994609af00856aa853b389ecd

    • SHA1

      d32134dfb0b48140f3c37c19776881c4cce0164b

    • SHA256

      6dc2e3a15222ed9491d47a2678e22365e723075bfcd020c6614d0eb23f6fa811

    • SHA512

      c0330f2885657d1002d0e6d7e00160e5febf829c303978fd6c53df74e4471eea0d7eaab2c99bdcc5dd4478b61a5fedf87f6a56ed2887b2924ad7127fdc522f9e

    • SSDEEP

      6144:ln7dv6/2Hg2ElRei0QhQjUcgfNKUCZ4ZJp:5BnHfKe78SpQVZ

    Score
    10/10
    redlinesectopratutsinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks