Overview

overview

10

Static

static

3

a867513ea1...6b.exe

windows7-x64

10

a867513ea1...6b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a867513ea15d62a53dd22bc2cfec9f6b

  • Size

    696KB

  • Sample

    240227-gseq2saf2x

  • MD5

    a867513ea15d62a53dd22bc2cfec9f6b

  • SHA1

    244a9b1a649cfb9f480149c247156bf056edb406

  • SHA256

    df0a75a69e01ecf32e2287fe1280403600e3e6d32060d199733b075d39d7559e

  • SHA512

    95997f056c27315d9ae9da03a8684c966688565ef242d3ad288f81bf64dcb9dd70762d1b672674cfafa36ba80e6ead2eff782ae9983fb5be0a1685eb9ccfdc4a

  • SSDEEP

    12288:ou5E3vXQFYzYkuxZemqSyBW3hLiOgqNnlBf8J2qKx:o6g/QoY1EBW3hL9r0J8

Score
10/10
redlinesectopratxxluchxx1infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

xxluchxx1

C2

lyeimivada.xyz:80

Targets

    • Target

      a867513ea15d62a53dd22bc2cfec9f6b

    • Size

      696KB

    • MD5

      a867513ea15d62a53dd22bc2cfec9f6b

    • SHA1

      244a9b1a649cfb9f480149c247156bf056edb406

    • SHA256

      df0a75a69e01ecf32e2287fe1280403600e3e6d32060d199733b075d39d7559e

    • SHA512

      95997f056c27315d9ae9da03a8684c966688565ef242d3ad288f81bf64dcb9dd70762d1b672674cfafa36ba80e6ead2eff782ae9983fb5be0a1685eb9ccfdc4a

    • SSDEEP

      12288:ou5E3vXQFYzYkuxZemqSyBW3hLiOgqNnlBf8J2qKx:o6g/QoY1EBW3hL9r0J8

    Score
    10/10
    redlinesectopratxxluchxx1infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks