Overview

overview

10

Static

static

1

52a74ace00...ba.exe

windows7-x64

10

52a74ace00...ba.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    52a74ace007acd62f2984ca7e27056ba

  • Size

    343KB

  • Sample

    240111-f4c6xsfcgj

  • MD5

    52a74ace007acd62f2984ca7e27056ba

  • SHA1

    00cdd8ed9f30384e955b597a5174236553be34d1

  • SHA256

    c14d115b8521d8eff7d58acd565a4150b1eed68f112c2cd0b4e035326f831d73

  • SHA512

    a92e76367acd21f9a9f29d2ef7ad435686b2bc43a25b46e90e0d5c3ccc0494c14b499a48150cb6b83ee8718eab19f271e38505326e9d745cb3c402fbd1b5f4cf

  • SSDEEP

    6144:bXWy3bHJbcSZfMomMN3b6ng/BOu9vs2W7x5Sp2B9+qizkO+:Ckbp4SZpmMN3bTZdG5g2B9pWU

Score
10/10
redlinesectopratbuild1infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

build1

C2

91.142.77.189:59638

Targets

    • Target

      52a74ace007acd62f2984ca7e27056ba

    • Size

      343KB

    • MD5

      52a74ace007acd62f2984ca7e27056ba

    • SHA1

      00cdd8ed9f30384e955b597a5174236553be34d1

    • SHA256

      c14d115b8521d8eff7d58acd565a4150b1eed68f112c2cd0b4e035326f831d73

    • SHA512

      a92e76367acd21f9a9f29d2ef7ad435686b2bc43a25b46e90e0d5c3ccc0494c14b499a48150cb6b83ee8718eab19f271e38505326e9d745cb3c402fbd1b5f4cf

    • SSDEEP

      6144:bXWy3bHJbcSZfMomMN3b6ng/BOu9vs2W7x5Sp2B9+qizkO+:Ckbp4SZpmMN3bTZdG5g2B9pWU

    Score
    10/10
    redlinesectopratbuild1infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks