Overview

overview

10

Static

static

3

3c22badd68...25.exe

windows7-x64

10

3c22badd68...25.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c22badd6880ac388422c74caedc2025

  • Size

    407KB

  • Sample

    240101-havvzsdcaj

  • MD5

    3c22badd6880ac388422c74caedc2025

  • SHA1

    a3e4fb65003747ed9af31afcd954c7365505813d

  • SHA256

    22471ae5a9f68ec623c973942263b58557834dfe5a82f29f714d92e9eb40609e

  • SHA512

    8488b040fefe0e17fd61bd1ddcf0d6c477505d575b8fec64c1c855eb2dd79aefe94c01e4d17c43d49ecc443ec743ae7cfb86bc3935de6ad713c662850b8e36e7

  • SSDEEP

    6144:ofE5DWdbUCN8vLG14RkxeRZCxPWysqYI87tyZ0UdS1OVMtqOnZ3tHVF:z5SdbUCNCLGLxeqHjCVV1Gwd3

Score
10/10
redlinesectopratupdinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

UPD

C2

185.215.113.45:41009

Targets

    • Target

      3c22badd6880ac388422c74caedc2025

    • Size

      407KB

    • MD5

      3c22badd6880ac388422c74caedc2025

    • SHA1

      a3e4fb65003747ed9af31afcd954c7365505813d

    • SHA256

      22471ae5a9f68ec623c973942263b58557834dfe5a82f29f714d92e9eb40609e

    • SHA512

      8488b040fefe0e17fd61bd1ddcf0d6c477505d575b8fec64c1c855eb2dd79aefe94c01e4d17c43d49ecc443ec743ae7cfb86bc3935de6ad713c662850b8e36e7

    • SSDEEP

      6144:ofE5DWdbUCN8vLG14RkxeRZCxPWysqYI87tyZ0UdS1OVMtqOnZ3tHVF:z5SdbUCNCLGLxeqHjCVV1Gwd3

    Score
    10/10
    redlinesectopratupdinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks