Overview

overview

10

Static

static

3

209f155a20...ad.exe

windows7-x64

10

209f155a20...ad.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    209f155a20f765148d956b20c41973ad

  • Size

    407KB

  • Sample

    231230-3vk7haacb4

  • MD5

    209f155a20f765148d956b20c41973ad

  • SHA1

    7c2883178f6eca08135128e37dbd16f1835408fc

  • SHA256

    94a1e49bc60423c53851e106d851164e1163b5abb60c53276e3fb9f4f912ef63

  • SHA512

    2c5a7a35ffee3eb4d3ea27b025207e45d73511b762e6b0497c19a97bf729074af4618267b94970c4d69fbf6639ff57cefff6d4ff3b6e46d44df54a7f480a42cd

  • SSDEEP

    12288:6PAs38Ojika0IUcIagkgJsjVz5KSKiPy:+3FjSuagXJsjVlK

Score
10/10
redlinesectoprat170infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

170

C2

147.124.222.75:42864

Targets

    • Target

      209f155a20f765148d956b20c41973ad

    • Size

      407KB

    • MD5

      209f155a20f765148d956b20c41973ad

    • SHA1

      7c2883178f6eca08135128e37dbd16f1835408fc

    • SHA256

      94a1e49bc60423c53851e106d851164e1163b5abb60c53276e3fb9f4f912ef63

    • SHA512

      2c5a7a35ffee3eb4d3ea27b025207e45d73511b762e6b0497c19a97bf729074af4618267b94970c4d69fbf6639ff57cefff6d4ff3b6e46d44df54a7f480a42cd

    • SSDEEP

      12288:6PAs38Ojika0IUcIagkgJsjVz5KSKiPy:+3FjSuagXJsjVlK

    Score
    10/10
    redlinesectoprat170infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks