Overview

overview

10

Static

static

1

73480d0b5c...1c.exe

windows7-x64

10

73480d0b5c...1c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    73480d0b5cec0c0e3edfcc426a711d1c

  • Size

    282KB

  • Sample

    240125-a1sjjscda8

  • MD5

    73480d0b5cec0c0e3edfcc426a711d1c

  • SHA1

    4c1c22da40b224ba67716f25a2afa1286d4c9019

  • SHA256

    8f9d6a3a8235198e7b7da1a99fb78c965bb93b30b3e516c952ae48e027064242

  • SHA512

    49ab646f962a73aa46854693b4578ca1752898c2473dd611300ae9f312bf99a573c7d8c3d2b02975021a3593ccb564b711d1cd91bc53795dbd7bf28c8a9f03e0

  • SSDEEP

    6144:neDY2puJt+MNbh/9Ercvk4TbAerf53Alc1/LA6Fw:uBpuJt+qHnR0OFw

Score
10/10
redlinesectoprat10infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

10

C2

lllwyerxedo.xyz:80

Targets

    • Target

      73480d0b5cec0c0e3edfcc426a711d1c

    • Size

      282KB

    • MD5

      73480d0b5cec0c0e3edfcc426a711d1c

    • SHA1

      4c1c22da40b224ba67716f25a2afa1286d4c9019

    • SHA256

      8f9d6a3a8235198e7b7da1a99fb78c965bb93b30b3e516c952ae48e027064242

    • SHA512

      49ab646f962a73aa46854693b4578ca1752898c2473dd611300ae9f312bf99a573c7d8c3d2b02975021a3593ccb564b711d1cd91bc53795dbd7bf28c8a9f03e0

    • SSDEEP

      6144:neDY2puJt+MNbh/9Ercvk4TbAerf53Alc1/LA6Fw:uBpuJt+qHnR0OFw

    Score
    10/10
    redlinesectoprat10infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks