Overview

overview

10

Static

static

3

74b6287a45...b2.exe

windows7-x64

10

74b6287a45...b2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74b6287a45b3fe5949ffa87f2019f1b2

  • Size

    329KB

  • Sample

    240125-ps5apsffe6

  • MD5

    74b6287a45b3fe5949ffa87f2019f1b2

  • SHA1

    2e4a5b48a0e0012b1469d73b373b23e4cbdd6595

  • SHA256

    fca68250f0af2ea4d2ae1747c92b89e67799cd41db4b6dfe8eed57cdcf1cb07b

  • SHA512

    6877b4660733575bbf87af0366a44199d9e7b633c7de82e2bddf54a507621651df585da186154a7a3b5fb5b57fefd24bafeb9ae14d742e4843b6d34d65934654

  • SSDEEP

    6144:IgoKwTZewoSYKSChl1PDUZdQTixtkfJNmsalgCvmAq/4GFVoli8nBwb8X:iKwdewoSYKSChl1PYdQTic+sauCvmA+W

Score
10/10
redlinesectoprat170infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

170

C2

147.124.222.75:42864

Targets

    • Target

      74b6287a45b3fe5949ffa87f2019f1b2

    • Size

      329KB

    • MD5

      74b6287a45b3fe5949ffa87f2019f1b2

    • SHA1

      2e4a5b48a0e0012b1469d73b373b23e4cbdd6595

    • SHA256

      fca68250f0af2ea4d2ae1747c92b89e67799cd41db4b6dfe8eed57cdcf1cb07b

    • SHA512

      6877b4660733575bbf87af0366a44199d9e7b633c7de82e2bddf54a507621651df585da186154a7a3b5fb5b57fefd24bafeb9ae14d742e4843b6d34d65934654

    • SSDEEP

      6144:IgoKwTZewoSYKSChl1PDUZdQTixtkfJNmsalgCvmAq/4GFVoli8nBwb8X:iKwdewoSYKSChl1PYdQTic+sauCvmA+W

    Score
    10/10
    redlinesectoprat170infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks