Overview

overview

10

Static

static

1

5880c49950...11.exe

windows7-x64

10

5880c49950...11.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5880c49950047e68f7c7cf7138c77f11

  • Size

    264KB

  • Sample

    231222-dk4hnabhc2

  • MD5

    5880c49950047e68f7c7cf7138c77f11

  • SHA1

    d1748a8fa5796bfa788b7144cf22f92de026fec7

  • SHA256

    ee129ca727fec8ea70620f7d8f78fd73b8cf41408d6842edd7375960329ec626

  • SHA512

    aa4aac4b4fa2ab4ac8fef658dfe59634069cbcb57dc5b281519c1823689f78da44067c6395de898eddf13f4aa5de9284d4aafa50c235550844ee05b75c9592da

  • SSDEEP

    3072:07/p1Sns2nTzXxdr/db7aGTk6YMhXFw2cn7sZswuh6mqy6fYUGk5Wjk2BWOsu:zns2nL5WGg6YMjw2c7shebqzZKjlBVsu

Score
10/10
redlinesectoprat2infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

2

C2

80.87.192.249:16640

Targets

    • Target

      5880c49950047e68f7c7cf7138c77f11

    • Size

      264KB

    • MD5

      5880c49950047e68f7c7cf7138c77f11

    • SHA1

      d1748a8fa5796bfa788b7144cf22f92de026fec7

    • SHA256

      ee129ca727fec8ea70620f7d8f78fd73b8cf41408d6842edd7375960329ec626

    • SHA512

      aa4aac4b4fa2ab4ac8fef658dfe59634069cbcb57dc5b281519c1823689f78da44067c6395de898eddf13f4aa5de9284d4aafa50c235550844ee05b75c9592da

    • SSDEEP

      3072:07/p1Sns2nTzXxdr/db7aGTk6YMhXFw2cn7sZswuh6mqy6fYUGk5Wjk2BWOsu:zns2nL5WGg6YMjw2c7shebqzZKjlBVsu

    Score
    10/10
    redlinesectoprat2infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks