Overview

overview

10

Static

static

3

aec9978478...f8.exe

windows7-x64

10

aec9978478...f8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aec9978478416b5672e34b6f61b0caf8

  • Size

    293KB

  • Sample

    240229-sakecscd4w

  • MD5

    aec9978478416b5672e34b6f61b0caf8

  • SHA1

    96d65819d448a1fc5b6112b852e84406b411ee2f

  • SHA256

    9924d3e088e8757d848c9da073be124e4cf628eff26aab993d45eeda149c7760

  • SHA512

    78d4d36be2d6f1ce6468a33020196de2b2cd61b8441cd2903eeffb3c316e15ef31b8832dabb5f403ce7d9a180e24cd176704a01b7bb9d6ab58018f9f47dcb3e6

  • SSDEEP

    6144:u1el4djKWRYnxErYg0vOop9qwdS9fLTQG149fRwoOL:uC404ydFWopEqS9fXp4zwoO

Score
10/10
redlinesectopratsewpalpadininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      aec9978478416b5672e34b6f61b0caf8

    • Size

      293KB

    • MD5

      aec9978478416b5672e34b6f61b0caf8

    • SHA1

      96d65819d448a1fc5b6112b852e84406b411ee2f

    • SHA256

      9924d3e088e8757d848c9da073be124e4cf628eff26aab993d45eeda149c7760

    • SHA512

      78d4d36be2d6f1ce6468a33020196de2b2cd61b8441cd2903eeffb3c316e15ef31b8832dabb5f403ce7d9a180e24cd176704a01b7bb9d6ab58018f9f47dcb3e6

    • SSDEEP

      6144:u1el4djKWRYnxErYg0vOop9qwdS9fLTQG149fRwoOL:uC404ydFWopEqS9fXp4zwoO

    Score
    10/10
    redlinesectopratsewpalpadininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks