Overview

overview

10

Static

static

3

a69b2b1ed2...08.exe

windows7-x64

10

a69b2b1ed2...08.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a69b2b1ed2c0323164e4b7d2f2006c08

  • Size

    350KB

  • Sample

    240226-r2eshsge62

  • MD5

    a69b2b1ed2c0323164e4b7d2f2006c08

  • SHA1

    1fc5ec6959f51602e9fe67dc218c1acdecc35c88

  • SHA256

    92db2f2e1466e7214d55edf8c572f908dc8a3a4b15e5ab597880b18d5910bf09

  • SHA512

    20c39da529d9f54ee79627e73ce4d0f374b93bb90783a25d3f5a6d09ee2760acb640c89efef33629ec193f645510f46304f62e848a229d416adf8a3f3dda0a43

  • SSDEEP

    6144:VyTMH7qk3ti7k1K6G+f1MUXpjERqOiPLLK07dZrNVfs8V:3HRdAk1K6Hf1MUZgRqOijzN2

Score
10/10
redlinesectopratsewpalpadininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      a69b2b1ed2c0323164e4b7d2f2006c08

    • Size

      350KB

    • MD5

      a69b2b1ed2c0323164e4b7d2f2006c08

    • SHA1

      1fc5ec6959f51602e9fe67dc218c1acdecc35c88

    • SHA256

      92db2f2e1466e7214d55edf8c572f908dc8a3a4b15e5ab597880b18d5910bf09

    • SHA512

      20c39da529d9f54ee79627e73ce4d0f374b93bb90783a25d3f5a6d09ee2760acb640c89efef33629ec193f645510f46304f62e848a229d416adf8a3f3dda0a43

    • SSDEEP

      6144:VyTMH7qk3ti7k1K6G+f1MUXpjERqOiPLLK07dZrNVfs8V:3HRdAk1K6Hf1MUZgRqOijzN2

    Score
    10/10
    redlinesectopratsewpalpadininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks