Overview

overview

10

Static

static

3

871cba3968...72.exe

windows7-x64

10

871cba3968...72.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    871cba396875673097c170edb571a972

  • Size

    586KB

  • Sample

    240201-rrm15sfdc6

  • MD5

    871cba396875673097c170edb571a972

  • SHA1

    18e925fd8597c1deefd28832ad428744577e6eb0

  • SHA256

    897676bf56a0dd969a5c9e566e05a0ca8c401d4d0c2002cbca223f249687f682

  • SHA512

    39c249e77dc39e78adbf7b599df6cf81519438366cf13700f57500aeb71f663260cb10118630981a12da94bc6a54ca36b68873d2158d5a22d628607b2c445e63

  • SSDEEP

    12288:Wk7XjhEnob5eA1God0C3RX7Vo9KAQVbqbO/bruWCFKGj:dGoD13l

Score
10/10
redlinesectoprat777infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

777

C2

45.147.231.225:40668

Targets

    • Target

      871cba396875673097c170edb571a972

    • Size

      586KB

    • MD5

      871cba396875673097c170edb571a972

    • SHA1

      18e925fd8597c1deefd28832ad428744577e6eb0

    • SHA256

      897676bf56a0dd969a5c9e566e05a0ca8c401d4d0c2002cbca223f249687f682

    • SHA512

      39c249e77dc39e78adbf7b599df6cf81519438366cf13700f57500aeb71f663260cb10118630981a12da94bc6a54ca36b68873d2158d5a22d628607b2c445e63

    • SSDEEP

      12288:Wk7XjhEnob5eA1God0C3RX7Vo9KAQVbqbO/bruWCFKGj:dGoD13l

    Score
    10/10
    redlinesectoprat777infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks