Overview

overview

10

Static

static

1

91066a2cdf...65.exe

windows7-x64

10

91066a2cdf...65.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    91066a2cdf728542f6d5e2f0b5094165

  • Size

    257KB

  • Sample

    231222-p4wspsbfgr

  • MD5

    91066a2cdf728542f6d5e2f0b5094165

  • SHA1

    c599fb94d1a5451d4b259a2562d9ffe3c4c9d201

  • SHA256

    caeb484c130b19934127ae2f1dc4036daba3afb3d27b71553b7ff618a7bbf7b6

  • SHA512

    79639fec97fa289e6c8abbbc0b9150723421d2153ea66f86916ccd9cbbab5bb213b4f2fb74a33936cedf6797663c2aff9923c1cf383d5a35062ab12756943098

  • SSDEEP

    6144:9ZVGb41OK68ohhbSomKOkyzuKZYoZLhB+Psu:9ZVmCOK68mGKOkrKZYoZLhYPsu

Score
10/10
redlinesectoprat2infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

2

C2

80.87.192.249:16640

Targets

    • Target

      91066a2cdf728542f6d5e2f0b5094165

    • Size

      257KB

    • MD5

      91066a2cdf728542f6d5e2f0b5094165

    • SHA1

      c599fb94d1a5451d4b259a2562d9ffe3c4c9d201

    • SHA256

      caeb484c130b19934127ae2f1dc4036daba3afb3d27b71553b7ff618a7bbf7b6

    • SHA512

      79639fec97fa289e6c8abbbc0b9150723421d2153ea66f86916ccd9cbbab5bb213b4f2fb74a33936cedf6797663c2aff9923c1cf383d5a35062ab12756943098

    • SSDEEP

      6144:9ZVGb41OK68ohhbSomKOkyzuKZYoZLhB+Psu:9ZVmCOK68mGKOkrKZYoZLhYPsu

    Score
    10/10
    redlinesectoprat2infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks