Overview

overview

10

Static

static

3

9d8bb393cb...eb.exe

windows7-x64

10

9d8bb393cb...eb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9d8bb393cb2d33170c89556b95343deb

  • Size

    324KB

  • Sample

    240215-lfqd8sde31

  • MD5

    9d8bb393cb2d33170c89556b95343deb

  • SHA1

    ef1c87af9e2e237e8141b34e8ce7e55e5fca92eb

  • SHA256

    f550b5c90e9640606ac51aa6d7e65a2c2b8060f91d89fd9dcdfc348212bbb9e2

  • SHA512

    1800d64cebddab4d4f4db834212cb75cd7d728b4fc0a784d409806e6c58e497f1b59dcd075815c4d83c0c9364923a49e93ed9aa6129f75caffb6ea0015bb46f8

  • SSDEEP

    6144:pX/N3TACx0KRTye2HGOS5AaBPAnpQx5AH:pXV3jx0Hee3MbBPAi

Score
10/10
redlinesectopratsewpalpadininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      9d8bb393cb2d33170c89556b95343deb

    • Size

      324KB

    • MD5

      9d8bb393cb2d33170c89556b95343deb

    • SHA1

      ef1c87af9e2e237e8141b34e8ce7e55e5fca92eb

    • SHA256

      f550b5c90e9640606ac51aa6d7e65a2c2b8060f91d89fd9dcdfc348212bbb9e2

    • SHA512

      1800d64cebddab4d4f4db834212cb75cd7d728b4fc0a784d409806e6c58e497f1b59dcd075815c4d83c0c9364923a49e93ed9aa6129f75caffb6ea0015bb46f8

    • SSDEEP

      6144:pX/N3TACx0KRTye2HGOS5AaBPAnpQx5AH:pXV3jx0Hee3MbBPAi

    Score
    10/10
    redlinesectopratsewpalpadininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks