Overview

overview

10

Static

static

3

b1be6330c2...e2.exe

windows7-x64

10

b1be6330c2...e2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b1be6330c27efcb99fb8d8c6ae0cbee2

  • Size

    310KB

  • Sample

    240304-k3gj6sff37

  • MD5

    b1be6330c27efcb99fb8d8c6ae0cbee2

  • SHA1

    b7d985a2dcc728635c178a71859a39beca515e2d

  • SHA256

    a6c6f64ac79ebb21d3f796a43fcbd5c739d713b65f9295b40cb48434d70289ea

  • SHA512

    9766091aaa779edec1231ec8829268b20cd34b3cec5c9068a690d64d3b4e76f9419a4b357ef2794eca90db36ccc301cf9f30f845d02c6b2d71c6483286dc63d1

  • SSDEEP

    6144:IHVwArFnG2UGNXZiTmos06qh98uPT/AArKi+tZycB2EDdRMOO9Xd:2Nr9G2UGNXUQOh9/T0TvOb

Score
10/10
redlinesectoprattestinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

test

C2

193.56.146.78:51487

Targets

    • Target

      b1be6330c27efcb99fb8d8c6ae0cbee2

    • Size

      310KB

    • MD5

      b1be6330c27efcb99fb8d8c6ae0cbee2

    • SHA1

      b7d985a2dcc728635c178a71859a39beca515e2d

    • SHA256

      a6c6f64ac79ebb21d3f796a43fcbd5c739d713b65f9295b40cb48434d70289ea

    • SHA512

      9766091aaa779edec1231ec8829268b20cd34b3cec5c9068a690d64d3b4e76f9419a4b357ef2794eca90db36ccc301cf9f30f845d02c6b2d71c6483286dc63d1

    • SSDEEP

      6144:IHVwArFnG2UGNXZiTmos06qh98uPT/AArKi+tZycB2EDdRMOO9Xd:2Nr9G2UGNXUQOh9/T0TvOb

    Score
    10/10
    redlinesectoprattestinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks