Overview

overview

10

Static

static

3

953d93e249...d4.exe

windows7-x64

10

953d93e249...d4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    953d93e24956822e11d1ff9e433731d4

  • Size

    300KB

  • Sample

    240206-xnpy8afdaq

  • MD5

    953d93e24956822e11d1ff9e433731d4

  • SHA1

    3f45bcca182046fa8957821089d804200227985d

  • SHA256

    f4eb31de9302b29f94e951cd77159b29ad6f36dc48dff1df573d13be632a0c16

  • SHA512

    c3791ebb2a90a82c4b937b58daa979a6e33d14606a5e89f398d56c8093d6582c76287576486c9292f0af00f7c7823147ef9d3993f47bb582b6f91c6fd9461137

  • SSDEEP

    6144:OO4fR5dzAqA5UKLOCIbZy8ECbi/Q8bEcxb:OFfv+FExbU8/i/LEcF

Score
10/10
redlinesectopratpub2infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

pub2

C2

185.92.73.84:80

Targets

    • Target

      953d93e24956822e11d1ff9e433731d4

    • Size

      300KB

    • MD5

      953d93e24956822e11d1ff9e433731d4

    • SHA1

      3f45bcca182046fa8957821089d804200227985d

    • SHA256

      f4eb31de9302b29f94e951cd77159b29ad6f36dc48dff1df573d13be632a0c16

    • SHA512

      c3791ebb2a90a82c4b937b58daa979a6e33d14606a5e89f398d56c8093d6582c76287576486c9292f0af00f7c7823147ef9d3993f47bb582b6f91c6fd9461137

    • SSDEEP

      6144:OO4fR5dzAqA5UKLOCIbZy8ECbi/Q8bEcxb:OFfv+FExbU8/i/LEcF

    Score
    10/10
    redlinesectopratpub2infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks