Overview

overview

10

Static

static

1

87ee87b65e...ab.exe

windows7-x64

10

87ee87b65e...ab.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    87ee87b65ea83c3599b7dfdca45eb1ab

  • Size

    343KB

  • Sample

    240201-3bmwzsgce6

  • MD5

    87ee87b65ea83c3599b7dfdca45eb1ab

  • SHA1

    a58b891ae271ca98a12e17254b10048f30da3379

  • SHA256

    18a42d9c4ba2b87de47de18aafcb0f09cce495e66f07262e619684abb5eae305

  • SHA512

    acbc38814b01ee8c6cca6cbfca8c1f8845f106e0d7ea22b753fb546e8a779dcb814abfe4059d9e0ea507cbf9af678fd54c72bc7c0e0d9bd437e409146a389d63

  • SSDEEP

    6144:bYkyNUwQ/lEaAP+DUFkfxJLglsPdjOrmj4Miop8e0Q2PXs6WzlIKi20ZREvO+:jyUPNfARFkvL31OrmkToaen4VW5IS0ZK

Score
10/10
redlinesectopratbuild1infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

build1

C2

91.142.77.189:59638

Targets

    • Target

      87ee87b65ea83c3599b7dfdca45eb1ab

    • Size

      343KB

    • MD5

      87ee87b65ea83c3599b7dfdca45eb1ab

    • SHA1

      a58b891ae271ca98a12e17254b10048f30da3379

    • SHA256

      18a42d9c4ba2b87de47de18aafcb0f09cce495e66f07262e619684abb5eae305

    • SHA512

      acbc38814b01ee8c6cca6cbfca8c1f8845f106e0d7ea22b753fb546e8a779dcb814abfe4059d9e0ea507cbf9af678fd54c72bc7c0e0d9bd437e409146a389d63

    • SSDEEP

      6144:bYkyNUwQ/lEaAP+DUFkfxJLglsPdjOrmj4Miop8e0Q2PXs6WzlIKi20ZREvO+:jyUPNfARFkvL31OrmkToaen4VW5IS0ZK

    Score
    10/10
    redlinesectopratbuild1infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks