Overview

overview

10

Static

static

3

90b23b79bc...2b.exe

windows7-x64

10

90b23b79bc...2b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    90b23b79bc42f1bf7d6b4c73cdcef82b

  • Size

    386KB

  • Sample

    231226-1hqv4sdhh6

  • MD5

    90b23b79bc42f1bf7d6b4c73cdcef82b

  • SHA1

    6595189e36c5c06ee0e6dd5949ee9b6bfacfb2e8

  • SHA256

    40645fca08231170a8dc53b8d38e2e90795696b01b2e7399e8e0f316e91f30f7

  • SHA512

    4c170559f844db9553a484dfa3821668fcd6870c39d886fefed33c68e970bd740782fe034b6afdf4acc997fa0cd468f0bd1a970560353adab7826bc5102c013d

  • SSDEEP

    6144:QyfcyAS1tHbP09b+0UL+YUU0CrUDokvR0+lL9KQ4oeLM1tuaOUAz:cTS1BI9b+4YtbovvR0O4ryoaOUA

Score
10/10
redlinesectopratpubinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

185.215.113.45:41009

Targets

    • Target

      90b23b79bc42f1bf7d6b4c73cdcef82b

    • Size

      386KB

    • MD5

      90b23b79bc42f1bf7d6b4c73cdcef82b

    • SHA1

      6595189e36c5c06ee0e6dd5949ee9b6bfacfb2e8

    • SHA256

      40645fca08231170a8dc53b8d38e2e90795696b01b2e7399e8e0f316e91f30f7

    • SHA512

      4c170559f844db9553a484dfa3821668fcd6870c39d886fefed33c68e970bd740782fe034b6afdf4acc997fa0cd468f0bd1a970560353adab7826bc5102c013d

    • SSDEEP

      6144:QyfcyAS1tHbP09b+0UL+YUU0CrUDokvR0+lL9KQ4oeLM1tuaOUAz:cTS1BI9b+4YtbovvR0O4ryoaOUA

    Score
    10/10
    redlinesectopratpubinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks