Overview

overview

10

Static

static

10

9850a146e6...1a.exe

windows7-x64

10

9850a146e6...1a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9850a146e69faa57ef437bf9cb7a781a

  • Size

    368KB

  • Sample

    240213-dk1rrsdh2x

  • MD5

    9850a146e69faa57ef437bf9cb7a781a

  • SHA1

    2bfa93d24a6772db3f760268a65c7113d3113114

  • SHA256

    c17e4fa4530f011bef743905ab7e5e176a6e30f0b92ffcc7f27ed2e40d89f3f0

  • SHA512

    ca993da6a830464d82e395ddb60579117b42bccce22785ae81b7f428c7b4297e4dc104fc57a5fdcde3feabfec174748e84dc6fb24cf59c24717aa734474ab8f5

  • SSDEEP

    3072:ei86Adib5AYQzaiO3PulyddHsv/MJeGVMUUs:N7AdOiYz4yYwemUs

Score
10/10
redlinesectoprat35infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

35

C2

45.144.29.222:17722

Targets

    • Target

      9850a146e69faa57ef437bf9cb7a781a

    • Size

      368KB

    • MD5

      9850a146e69faa57ef437bf9cb7a781a

    • SHA1

      2bfa93d24a6772db3f760268a65c7113d3113114

    • SHA256

      c17e4fa4530f011bef743905ab7e5e176a6e30f0b92ffcc7f27ed2e40d89f3f0

    • SHA512

      ca993da6a830464d82e395ddb60579117b42bccce22785ae81b7f428c7b4297e4dc104fc57a5fdcde3feabfec174748e84dc6fb24cf59c24717aa734474ab8f5

    • SSDEEP

      3072:ei86Adib5AYQzaiO3PulyddHsv/MJeGVMUUs:N7AdOiYz4yYwemUs

    Score
    10/10
    redlinesectoprat35infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks