Overview

overview

10

Static

static

1

184d122b49...12.exe

windows7-x64

10

184d122b49...12.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    184d122b490b7ddd40bb242632966c12

  • Size

    210KB

  • Sample

    231224-25l14sbhg5

  • MD5

    184d122b490b7ddd40bb242632966c12

  • SHA1

    52eeebcb30a95c2ba34d6c9c82154bcd07e61bbc

  • SHA256

    085a46a11e5f51719ad5621e6d3595befbb01ab0f7a88277a4e923e414d41700

  • SHA512

    b226a77270a98676479c9e713dee35b5c3e28288d2d1e316dec7888d557579d9233808321e873d80b4fdb52deac19d049de1ee98c22577a40df27b628c0fe875

  • SSDEEP

    3072:g+cs070z8krSQCRdEf9J862EnbWjHPVgbZqL8dQgLq2WqxrztDw:pcs07M8krSQC7Ex0HtyqwdQgLbrhw

Score
10/10
redlinesectopratpro2infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

pro2

C2

95.217.122.120:8374

Targets

    • Target

      184d122b490b7ddd40bb242632966c12

    • Size

      210KB

    • MD5

      184d122b490b7ddd40bb242632966c12

    • SHA1

      52eeebcb30a95c2ba34d6c9c82154bcd07e61bbc

    • SHA256

      085a46a11e5f51719ad5621e6d3595befbb01ab0f7a88277a4e923e414d41700

    • SHA512

      b226a77270a98676479c9e713dee35b5c3e28288d2d1e316dec7888d557579d9233808321e873d80b4fdb52deac19d049de1ee98c22577a40df27b628c0fe875

    • SSDEEP

      3072:g+cs070z8krSQCRdEf9J862EnbWjHPVgbZqL8dQgLq2WqxrztDw:pcs07M8krSQC7Ex0HtyqwdQgLbrhw

    Score
    10/10
    redlinesectopratpro2infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks