Overview

overview

10

Static

static

3

98132ebee5...e4.exe

windows7-x64

10

98132ebee5...e4.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    98132ebee524a8577088db3ee7cf53e4
  • Size 309KB
  • Sample240213-bdbsysff8s
  • SHA256 dd112429be2f9488138783401ff0a0c2b13240cf0b0167b8b47eb251aa623da4
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
redlinesectopratmix30.08infostealerrattrojan

Malware Config

Extracted

Family

  • redline

Botnet

  • mix30.08

C2

  • 135.181.134.27:53845

Targets

    • Target
      98132ebee524a8577088db3ee7cf53e4
    • Size 309KB
    • SHA256 dd112429be2f9488138783401ff0a0c2b13240cf0b0167b8b47eb251aa623da4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    redlinesectopratmix30.08infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks