Overview

overview

10

Static

static

1

ce67365d2a...95.exe

windows7-x64

10

ce67365d2a...95.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce67365d2a9e7cf343ae1d8035f05295

  • Size

    369KB

  • Sample

    231222-r9f1jsdhfm

  • MD5

    ce67365d2a9e7cf343ae1d8035f05295

  • SHA1

    e7c970f5b58250985434b207397d3e66f702037c

  • SHA256

    e910c376cf5d025228ec4c66391c3eba9332d71b5301c05d5ef7c51369b4d575

  • SHA512

    5106c55365b65b411525c00f50f40113fe0836047ec9f2f5a7ec0d7ddfa4986df9b6e83a28db912fbb314802a6513d40b59b9866aa20421f8ee1760750f25aad

  • SSDEEP

    6144:D/Ftai7NKx3u+ancbOXKhkxuPtmUztQfQjIr9Cq8T1N/F8ygNNHa+lsu:/ai70Bu+ancbOQmGzwQjIr4dX/FTgNNL

Score
10/10
redlinesectoprat2infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

2

C2

80.87.192.249:16640

Targets

    • Target

      ce67365d2a9e7cf343ae1d8035f05295

    • Size

      369KB

    • MD5

      ce67365d2a9e7cf343ae1d8035f05295

    • SHA1

      e7c970f5b58250985434b207397d3e66f702037c

    • SHA256

      e910c376cf5d025228ec4c66391c3eba9332d71b5301c05d5ef7c51369b4d575

    • SHA512

      5106c55365b65b411525c00f50f40113fe0836047ec9f2f5a7ec0d7ddfa4986df9b6e83a28db912fbb314802a6513d40b59b9866aa20421f8ee1760750f25aad

    • SSDEEP

      6144:D/Ftai7NKx3u+ancbOXKhkxuPtmUztQfQjIr9Cq8T1N/F8ygNNHa+lsu:/ai70Bu+ancbOQmGzwQjIr4dX/FTgNNL

    Score
    10/10
    redlinesectoprat2infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks