Overview

overview

10

Static

static

3

b6736342d4...76.exe

windows7-x64

10

b6736342d4...76.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b6736342d4b699eade06aa8670669976

  • Size

    385KB

  • Sample

    240306-ehpr6aae6x

  • MD5

    b6736342d4b699eade06aa8670669976

  • SHA1

    c41b41dac8640676b868102e42efc8e216b6dc9b

  • SHA256

    a041632426b501e0348f5271ed9c55dd8b6f5a20357f7c3aa7d3455dfc343114

  • SHA512

    7ace68a23cc3a978b68a3c19b8789fed2a518c7586d0d64aae8994aa9e76bb0c4c45cd43d7ad57a8d91e07a6e072e194afe7edede6867dd4553ae7a9f49c20d8

  • SSDEEP

    6144:pmQvygSfdHb/NVNQhUiGWjXcEBeDs9K2Z2DpZ1WTQk5lHNY:9rSfRxVNQ0W7BEWyc8SNY

Score
10/10
redlinesectopratsewpalpadininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      b6736342d4b699eade06aa8670669976

    • Size

      385KB

    • MD5

      b6736342d4b699eade06aa8670669976

    • SHA1

      c41b41dac8640676b868102e42efc8e216b6dc9b

    • SHA256

      a041632426b501e0348f5271ed9c55dd8b6f5a20357f7c3aa7d3455dfc343114

    • SHA512

      7ace68a23cc3a978b68a3c19b8789fed2a518c7586d0d64aae8994aa9e76bb0c4c45cd43d7ad57a8d91e07a6e072e194afe7edede6867dd4553ae7a9f49c20d8

    • SSDEEP

      6144:pmQvygSfdHb/NVNQhUiGWjXcEBeDs9K2Z2DpZ1WTQk5lHNY:9rSfRxVNQ0W7BEWyc8SNY

    Score
    10/10
    redlinesectopratsewpalpadininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks