Overview

overview

10

Static

static

10

a4afd9519b...e0.exe

windows7-x64

10

a4afd9519b...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a4afd9519bed282bc4c1248f7aaafde0

  • Size

    159KB

  • Sample

    240225-1rmj2sea8t

  • MD5

    a4afd9519bed282bc4c1248f7aaafde0

  • SHA1

    a00c56d49c3c229305da6f22be2dc18087623074

  • SHA256

    c8c90ad108a721b1ba02b23268b346e8f108ac0381e3a59a999b8df498d16015

  • SHA512

    18dbd091a7b17e646947624572a5e0077b5b62807ebcfe7c815dd9fcabf1529254240f86b026236ce117e35321ff88f2be4b9cdbbceb0d69d1942f9fa662a54d

  • SSDEEP

    1536:ce1uHb16alk5mXKjLrubCX8s5jbuRGdnnhuym/dKVWdbknE7G6qTaoigPk:Vl8ALrubCX8sNvnnYy6dKukE+fk

Score
10/10
redlinesectoprat1infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.88.107.116:44061

Targets

    • Target

      a4afd9519bed282bc4c1248f7aaafde0

    • Size

      159KB

    • MD5

      a4afd9519bed282bc4c1248f7aaafde0

    • SHA1

      a00c56d49c3c229305da6f22be2dc18087623074

    • SHA256

      c8c90ad108a721b1ba02b23268b346e8f108ac0381e3a59a999b8df498d16015

    • SHA512

      18dbd091a7b17e646947624572a5e0077b5b62807ebcfe7c815dd9fcabf1529254240f86b026236ce117e35321ff88f2be4b9cdbbceb0d69d1942f9fa662a54d

    • SSDEEP

      1536:ce1uHb16alk5mXKjLrubCX8s5jbuRGdnnhuym/dKVWdbknE7G6qTaoigPk:Vl8ALrubCX8sNvnnYy6dKukE+fk

    Score
    10/10
    redlinesectoprat1infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks