Overview

overview

10

Static

static

3

af23b6f887...b8.exe

windows7-x64

10

af23b6f887...b8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    af23b6f887c0a5dc113975b9146d7eb8

  • Size

    336KB

  • Sample

    240229-wst83age6y

  • MD5

    af23b6f887c0a5dc113975b9146d7eb8

  • SHA1

    f990aa910df5b9b436c77cf3cb2d97f60326b0cc

  • SHA256

    92ce8e6c8d402c9f1b5974f66480724aa42f01a700f3a3ca882df2e764a62468

  • SHA512

    7222251d8f69f099ad35fd002eb1db631b80b050d0179b58bfdca6c5973e26053d6f9bc3e8efea15ad8e0b7b0264c184722b1db0bd9dc4b62071c4e3310efc93

  • SSDEEP

    6144:wpr9Xriv4b1Kq6QB30+8BE9/ZtulCd135i0BPAnpQx5AH:c9Xr3b1SKn/ZtuC1JPBPAi

Score
10/10
redlinesectopratsewpalpadininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      af23b6f887c0a5dc113975b9146d7eb8

    • Size

      336KB

    • MD5

      af23b6f887c0a5dc113975b9146d7eb8

    • SHA1

      f990aa910df5b9b436c77cf3cb2d97f60326b0cc

    • SHA256

      92ce8e6c8d402c9f1b5974f66480724aa42f01a700f3a3ca882df2e764a62468

    • SHA512

      7222251d8f69f099ad35fd002eb1db631b80b050d0179b58bfdca6c5973e26053d6f9bc3e8efea15ad8e0b7b0264c184722b1db0bd9dc4b62071c4e3310efc93

    • SSDEEP

      6144:wpr9Xriv4b1Kq6QB30+8BE9/ZtulCd135i0BPAnpQx5AH:c9Xr3b1SKn/ZtuC1JPBPAi

    Score
    10/10
    redlinesectopratsewpalpadininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks