Overview

overview

10

Static

static

1

5e2199b802...c4.exe

windows7-x64

10

5e2199b802...c4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5e2199b80272c1d750b53778096f61c4

  • Size

    264KB

  • Sample

    231222-edj14sdfb6

  • MD5

    5e2199b80272c1d750b53778096f61c4

  • SHA1

    ab31707ac890d0e60332910bbb981964e9b3d4c3

  • SHA256

    5bc881ea953df88de9dbb55528c9ff4e7bae3ec32a70f8c083a98651d94ffb65

  • SHA512

    2e42a871b7d376ae2e89abb5b4a3c7279749f014c762f438c529b39db38854ebedcd296c625363274a83983f9350f654e3e60659683910f2063395764d692807

  • SSDEEP

    3072:sKbFJui+Q28BlbBGTY3kstSj0qRbrlSYYegg6UOEqwTPSxl2mO37esy6W5Ey+P1t:+i+Q2cY7qeRvMSbRSxl2lR7jMEsu

Score
10/10
redlinesectoprat2infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

2

C2

80.87.192.249:16640

Targets

    • Target

      5e2199b80272c1d750b53778096f61c4

    • Size

      264KB

    • MD5

      5e2199b80272c1d750b53778096f61c4

    • SHA1

      ab31707ac890d0e60332910bbb981964e9b3d4c3

    • SHA256

      5bc881ea953df88de9dbb55528c9ff4e7bae3ec32a70f8c083a98651d94ffb65

    • SHA512

      2e42a871b7d376ae2e89abb5b4a3c7279749f014c762f438c529b39db38854ebedcd296c625363274a83983f9350f654e3e60659683910f2063395764d692807

    • SSDEEP

      3072:sKbFJui+Q28BlbBGTY3kstSj0qRbrlSYYegg6UOEqwTPSxl2mO37esy6W5Ey+P1t:+i+Q2cY7qeRvMSbRSxl2lR7jMEsu

    Score
    10/10
    redlinesectoprat2infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks