Overview

overview

10

Static

static

3

7021cbf394...9e.exe

windows7-x64

10

7021cbf394...9e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7021cbf39452b83c63c57bbf706f9a9e

  • Size

    344KB

  • Sample

    240123-vyej5addbr

  • MD5

    7021cbf39452b83c63c57bbf706f9a9e

  • SHA1

    414a61b96e04762d02e6ab60095ca8845017908f

  • SHA256

    8f308760b57ddfb34fbbcd49563b3056dabdb589d1999265bc8952453c36d261

  • SHA512

    706463bcc47237c4c8f16080780e925ad491b49dc77cdf0cbc1be5bb55eebae566f71093e125abb95d3d9125af9274109a349b761ba4fa61a97a042ba04fff1d

  • SSDEEP

    6144:U4qlidWj/GqawU/u/GgGHy745hD4E+5DRAoFU+MoJri0K0AzTIbCGlM:+6WjdA/yGHyk5h3K79MCAfIGp

Score
10/10
redlinesectopratupdinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

UPD

C2

193.56.146.78:54955

Targets

    • Target

      7021cbf39452b83c63c57bbf706f9a9e

    • Size

      344KB

    • MD5

      7021cbf39452b83c63c57bbf706f9a9e

    • SHA1

      414a61b96e04762d02e6ab60095ca8845017908f

    • SHA256

      8f308760b57ddfb34fbbcd49563b3056dabdb589d1999265bc8952453c36d261

    • SHA512

      706463bcc47237c4c8f16080780e925ad491b49dc77cdf0cbc1be5bb55eebae566f71093e125abb95d3d9125af9274109a349b761ba4fa61a97a042ba04fff1d

    • SSDEEP

      6144:U4qlidWj/GqawU/u/GgGHy745hD4E+5DRAoFU+MoJri0K0AzTIbCGlM:+6WjdA/yGHyk5h3K79MCAfIGp

    Score
    10/10
    redlinesectopratupdinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks