Overview

overview

10

Static

static

3

4f460be665...20.exe

windows7-x64

10

4f460be665...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f460be665785195134088eb9f72b320

  • Size

    396KB

  • Sample

    240110-cb4avscgh3

  • MD5

    4f460be665785195134088eb9f72b320

  • SHA1

    7d23533ff926a96d95b89f2bb571bf12fccb4a69

  • SHA256

    e2bb7c1e792df4737bf3823dc633d190538a2689fbdb3d44da96fceb8625843a

  • SHA512

    36468cb921634289036fe9aa7fb18d76dcecfb7b8303bdd6fc6f001231005d4dc5013ff7954c155b199646e7a4c1a8661445648329b222a35458457e1f7ea26d

  • SSDEEP

    6144:y8CygNFHPNOESug8y1oSGTJNkPtqCgaMefXL7ruE+lH42FJCGeNjptmh7Y+kuLZ8:OzNFvEESug8y1JqALvL/UJCGeNqh4aa

Score
10/10
redlinesectoprat170infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

170

C2

147.124.222.75:42864

Targets

    • Target

      4f460be665785195134088eb9f72b320

    • Size

      396KB

    • MD5

      4f460be665785195134088eb9f72b320

    • SHA1

      7d23533ff926a96d95b89f2bb571bf12fccb4a69

    • SHA256

      e2bb7c1e792df4737bf3823dc633d190538a2689fbdb3d44da96fceb8625843a

    • SHA512

      36468cb921634289036fe9aa7fb18d76dcecfb7b8303bdd6fc6f001231005d4dc5013ff7954c155b199646e7a4c1a8661445648329b222a35458457e1f7ea26d

    • SSDEEP

      6144:y8CygNFHPNOESug8y1oSGTJNkPtqCgaMefXL7ruE+lH42FJCGeNjptmh7Y+kuLZ8:OzNFvEESug8y1JqALvL/UJCGeNqh4aa

    Score
    10/10
    redlinesectoprat170infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks