Overview

overview

10

Static

static

10

10ef944af0...17.exe

windows7-x64

10

10ef944af0...17.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    10ef944af097dfefef2b1e3b26fd2017.exe

  • Size

    116KB

  • Sample

    240105-n6w1tacdh7

  • MD5

    10ef944af097dfefef2b1e3b26fd2017

  • SHA1

    cc8f9e6e0a6e9841f224adc679161b551cf50fa3

  • SHA256

    6d478f93063ce6433c9962bb6a1ade13344f279ee793dc4098ab4b352c830d9f

  • SHA512

    8cc53dbc0662a90a9ba039736901682ed69171723769f580e075fcda0d4cc40c69bbd15a6829cd5563ae37a7745468e62510654b883cb556ae3fcd5236b5b0c1

  • SSDEEP

    1536:4e16bb1WyVc1vZKnuZvMpHejbuRGdEnhtyq/d3VNdbknEzG6qTaoiglnHm+Ebv:ppBKcvMpcvEnvyOd3BkEm1G+Y

Score
10/10
redlinesectopratinstallsinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

INSTALLS

C2

95.215.205.85:48425

Targets

    • Target

      10ef944af097dfefef2b1e3b26fd2017.exe

    • Size

      116KB

    • MD5

      10ef944af097dfefef2b1e3b26fd2017

    • SHA1

      cc8f9e6e0a6e9841f224adc679161b551cf50fa3

    • SHA256

      6d478f93063ce6433c9962bb6a1ade13344f279ee793dc4098ab4b352c830d9f

    • SHA512

      8cc53dbc0662a90a9ba039736901682ed69171723769f580e075fcda0d4cc40c69bbd15a6829cd5563ae37a7745468e62510654b883cb556ae3fcd5236b5b0c1

    • SSDEEP

      1536:4e16bb1WyVc1vZKnuZvMpHejbuRGdEnhtyq/d3VNdbknEzG6qTaoiglnHm+Ebv:ppBKcvMpcvEnvyOd3BkEm1G+Y

    Score
    10/10
    redlinesectopratinstallsinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks