Overview

overview

10

Static

static

3

af167221b2...bc.exe

windows7-x64

10

af167221b2...bc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    af167221b2f35dd737d70ed26d81a2bc

  • Size

    386KB

  • Sample

    240229-v9ts7age47

  • MD5

    af167221b2f35dd737d70ed26d81a2bc

  • SHA1

    682d89b71f27ac81d02e339feef23feba805e420

  • SHA256

    df7cbf5011ea28d6375b498948b39922b5bb1460dc23699a2c0fe953d8ec9619

  • SHA512

    da39ab8b690c93ee83668050026261f831750bf413b4f27f93b1a44ead93b510eae27656dc2cdb1d3a32769d959cb106ed724fab170d074183f367e84c05b781

  • SSDEEP

    6144:cAQ5y1itLUcxcNUhUd3U8FLzIucaA3T3nBk+CbunWaNU1iYk1oCnwg09DTLh:wCitIfNUhmFHnN43KYnWax2CfqLh

Score
10/10
redlinesectopratsewpalpadininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      af167221b2f35dd737d70ed26d81a2bc

    • Size

      386KB

    • MD5

      af167221b2f35dd737d70ed26d81a2bc

    • SHA1

      682d89b71f27ac81d02e339feef23feba805e420

    • SHA256

      df7cbf5011ea28d6375b498948b39922b5bb1460dc23699a2c0fe953d8ec9619

    • SHA512

      da39ab8b690c93ee83668050026261f831750bf413b4f27f93b1a44ead93b510eae27656dc2cdb1d3a32769d959cb106ed724fab170d074183f367e84c05b781

    • SSDEEP

      6144:cAQ5y1itLUcxcNUhUd3U8FLzIucaA3T3nBk+CbunWaNU1iYk1oCnwg09DTLh:wCitIfNUhmFHnN43KYnWax2CfqLh

    Score
    10/10
    redlinesectopratsewpalpadininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks