Overview

overview

10

Static

static

3

633d5cb19e...02.exe

windows7-x64

10

633d5cb19e...02.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    633d5cb19eb2f78725f9a95dc9339a02

  • Size

    310KB

  • Sample

    240117-wjky2abhhl

  • MD5

    633d5cb19eb2f78725f9a95dc9339a02

  • SHA1

    10462c6866ac2f84a39abae36671b5d8f71371fc

  • SHA256

    bee988479da73efb1ded319b3f8242a2834178605e28108350929d5ec5debfbc

  • SHA512

    b82c72651ffc7a35bef25c073b33a8b730346c8233cc2a06f52e4dc9b39daa95531f153ee6a74d0c4cae0805651fe9eb61be4fae08c5399c3df5025cd598ea55

  • SSDEEP

    6144:3hB2YF0m4X8TNA3jY5so3KK+c+lJeXit+RRqg9tPsCB:jim4MTNwYWo39n6we+RD9dse

Score
10/10
redlinesectopratpubinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

pub

C2

193.56.146.78:51487

Targets

    • Target

      633d5cb19eb2f78725f9a95dc9339a02

    • Size

      310KB

    • MD5

      633d5cb19eb2f78725f9a95dc9339a02

    • SHA1

      10462c6866ac2f84a39abae36671b5d8f71371fc

    • SHA256

      bee988479da73efb1ded319b3f8242a2834178605e28108350929d5ec5debfbc

    • SHA512

      b82c72651ffc7a35bef25c073b33a8b730346c8233cc2a06f52e4dc9b39daa95531f153ee6a74d0c4cae0805651fe9eb61be4fae08c5399c3df5025cd598ea55

    • SSDEEP

      6144:3hB2YF0m4X8TNA3jY5so3KK+c+lJeXit+RRqg9tPsCB:jim4MTNwYWo39n6we+RD9dse

    Score
    10/10
    redlinesectopratpubinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks