Overview

overview

10

Static

static

1

29552277e2...10.exe

windows7-x64

10

29552277e2...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    29552277e213fb10292ca3babe5a4010

  • Size

    264KB

  • Sample

    231221-3pv5hsdhe3

  • MD5

    29552277e213fb10292ca3babe5a4010

  • SHA1

    5c0169a433a9364dc98708a45d885ecb418a697e

  • SHA256

    14a0fbc900a954039f956595da29f376eaf353181f5a5cdcd9c0c48ba100702d

  • SHA512

    cfb033f4d443680c86bae51c30f57086d33085e79db93aeeb6f579c6e62eaee9b3367775082aeceaa7fb7e549cbd654c64fd228a97e0ec8ed9428614acc8d0cf

  • SSDEEP

    6144:7nddkjyr7LbOCHEfrbrdDCp+eoQKfuyyXsu:jdIyr7LbOCkfjdW0ety6su

Score
10/10
redlinesectoprat2infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

2

C2

80.87.192.249:16640

Targets

    • Target

      29552277e213fb10292ca3babe5a4010

    • Size

      264KB

    • MD5

      29552277e213fb10292ca3babe5a4010

    • SHA1

      5c0169a433a9364dc98708a45d885ecb418a697e

    • SHA256

      14a0fbc900a954039f956595da29f376eaf353181f5a5cdcd9c0c48ba100702d

    • SHA512

      cfb033f4d443680c86bae51c30f57086d33085e79db93aeeb6f579c6e62eaee9b3367775082aeceaa7fb7e549cbd654c64fd228a97e0ec8ed9428614acc8d0cf

    • SSDEEP

      6144:7nddkjyr7LbOCHEfrbrdDCp+eoQKfuyyXsu:jdIyr7LbOCkfjdW0ety6su

    Score
    10/10
    redlinesectoprat2infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks