Overview

overview

10

Static

static

3

ae2e2e76bf...18.exe

windows7-x64

10

ae2e2e76bf...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ae2e2e76bfa41739069408f6f23c7318

  • Size

    350KB

  • Sample

    240229-lhafssda67

  • MD5

    ae2e2e76bfa41739069408f6f23c7318

  • SHA1

    95d7f767aa64ceb3d896fac9d545f543f580ec2a

  • SHA256

    b41ee95265794c432965e377333871ad88ab9f0efca6005a6524f02ad29837da

  • SHA512

    7227053966fbd11e617039adb2e0f2d1b3f705ae0bdb9c7a86fc2ab6d53d4dc9241b8e0059ee3deae676ad1b16032935352e6df4180656f39f3acf41f0da310d

  • SSDEEP

    6144:neXNOMVcz7nEWw/929ygt4sGUP5xbLKhZrNVfs8V:nSMM6z4WwF8QU5GN2

Score
10/10
redlinesectopratsewpalpadininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      ae2e2e76bfa41739069408f6f23c7318

    • Size

      350KB

    • MD5

      ae2e2e76bfa41739069408f6f23c7318

    • SHA1

      95d7f767aa64ceb3d896fac9d545f543f580ec2a

    • SHA256

      b41ee95265794c432965e377333871ad88ab9f0efca6005a6524f02ad29837da

    • SHA512

      7227053966fbd11e617039adb2e0f2d1b3f705ae0bdb9c7a86fc2ab6d53d4dc9241b8e0059ee3deae676ad1b16032935352e6df4180656f39f3acf41f0da310d

    • SSDEEP

      6144:neXNOMVcz7nEWw/929ygt4sGUP5xbLKhZrNVfs8V:nSMM6z4WwF8QU5GN2

    Score
    10/10
    redlinesectopratsewpalpadininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks