Overview

overview

10

Static

static

10

75117d6161...07.exe

windows7-x64

10

75117d6161...07.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75117d6161a1af8686f0990958d2e707

  • Size

    115KB

  • Sample

    240125-vs4l3acchm

  • MD5

    75117d6161a1af8686f0990958d2e707

  • SHA1

    24c91177c2bd3f1cf4d6b07328cad40c44408011

  • SHA256

    bce6a499cd311795722c3340d120ed6c30df3bbb5b2700ca7fdfc96da539951d

  • SHA512

    9c55830531aa339b28f8f2806fa6030f98fcbf4325a222ccb6ac214b701412835bfbcf74d4253a0282528c57f2169f86f408ceccb3c19df7b2185ae01ebfaf16

  • SSDEEP

    3072:KKMki8F+IvggoxAWmA1mpqVdZndy8dut/IOq0:lMe8T1mpqVd/yJt/IO

Score
10/10
kinsingredlinesectopratinfostealerloaderrattrojan

Malware Config

Extracted

Family

redline

C2

135.181.171.9:45918

Targets

    • Target

      75117d6161a1af8686f0990958d2e707

    • Size

      115KB

    • MD5

      75117d6161a1af8686f0990958d2e707

    • SHA1

      24c91177c2bd3f1cf4d6b07328cad40c44408011

    • SHA256

      bce6a499cd311795722c3340d120ed6c30df3bbb5b2700ca7fdfc96da539951d

    • SHA512

      9c55830531aa339b28f8f2806fa6030f98fcbf4325a222ccb6ac214b701412835bfbcf74d4253a0282528c57f2169f86f408ceccb3c19df7b2185ae01ebfaf16

    • SSDEEP

      3072:KKMki8F+IvggoxAWmA1mpqVdZndy8dut/IOq0:lMe8T1mpqVd/yJt/IO

    Score
    10/10
    redlinesectopratinfostealerrattrojankinsingloader

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks