Overview

overview

10

Static

static

10

2e2fbede90...90.exe

windows7-x64

10

2e2fbede90...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e2fbede9031283a63416898456b2190

  • Size

    98KB

  • Sample

    231231-jsr3gsefd9

  • MD5

    2e2fbede9031283a63416898456b2190

  • SHA1

    3920bf865e52864d5dfe4dea75c04e63cb99a574

  • SHA256

    c0766842d777c819b82789c97453c1ac6bc57e9886c1a20b2c4026f61e786faa

  • SHA512

    ccac7bda53e5f38366a2e4e26438edd1e66af7b19bff3ab4432b78ee00d86195c373dc798e3599171667b38dd28d6b90676e07d4318ce9278714d23a47f0d7be

  • SSDEEP

    1536:f3LNmocOW9JrRiAb9UJFB4mbfexvOu8UyyedQh3zqCxXsESG6ijoigC:fxmocAK9UJrlgOuHyzddSnB

Score
10/10
redlinesectoprat11infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

11

C2

135.181.104.154:22167

Targets

    • Target

      2e2fbede9031283a63416898456b2190

    • Size

      98KB

    • MD5

      2e2fbede9031283a63416898456b2190

    • SHA1

      3920bf865e52864d5dfe4dea75c04e63cb99a574

    • SHA256

      c0766842d777c819b82789c97453c1ac6bc57e9886c1a20b2c4026f61e786faa

    • SHA512

      ccac7bda53e5f38366a2e4e26438edd1e66af7b19bff3ab4432b78ee00d86195c373dc798e3599171667b38dd28d6b90676e07d4318ce9278714d23a47f0d7be

    • SSDEEP

      1536:f3LNmocOW9JrRiAb9UJFB4mbfexvOu8UyyedQh3zqCxXsESG6ijoigC:fxmocAK9UJrlgOuHyzddSnB

    Score
    10/10
    redlinesectoprat11infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks