Overview

overview

10

Static

static

3

01bf86b5ca...5a.exe

windows7-x64

10

01bf86b5ca...5a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    01bf86b5caf867e70f0c6fb148125a5a

  • Size

    1.1MB

  • Sample

    231229-x7fjwsbcaq

  • MD5

    01bf86b5caf867e70f0c6fb148125a5a

  • SHA1

    3cded8fd741f886845f9f3093b6651203daa0522

  • SHA256

    bcb380255f3dad767bbf18e7268dafcfbb70bb1934736eb172488b445975ba83

  • SHA512

    7138741b13cc8eeaf46bfa8dde9f483439a3def3862aa47aafb590b47eb5b2fd14786f7edcc66ae2d154219427c22f3d4966a31418135f2c4819ecd48ee818ab

  • SSDEEP

    24576:b/YMs9GEi5T5VFagmiuly8jjRUQoMmJB:b/mi9foguYQoMQ

Score
10/10
redlinesectoprattest1infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

test1

C2

xoyuluilsh.xyz:80

Targets

    • Target

      01bf86b5caf867e70f0c6fb148125a5a

    • Size

      1.1MB

    • MD5

      01bf86b5caf867e70f0c6fb148125a5a

    • SHA1

      3cded8fd741f886845f9f3093b6651203daa0522

    • SHA256

      bcb380255f3dad767bbf18e7268dafcfbb70bb1934736eb172488b445975ba83

    • SHA512

      7138741b13cc8eeaf46bfa8dde9f483439a3def3862aa47aafb590b47eb5b2fd14786f7edcc66ae2d154219427c22f3d4966a31418135f2c4819ecd48ee818ab

    • SSDEEP

      24576:b/YMs9GEi5T5VFagmiuly8jjRUQoMmJB:b/mi9foguYQoMQ

    Score
    10/10
    redlinesectoprattest1infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks