Overview

overview

10

Static

static

3

bb2cd9052b...11.exe

windows7-x64

10

bb2cd9052b...11.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bb2cd9052b7b7a67e468e9c3060e3811

  • Size

    307KB

  • Sample

    240308-nwensafa61

  • MD5

    bb2cd9052b7b7a67e468e9c3060e3811

  • SHA1

    85eebf458f873751665c515c631cb9bc32beeb0d

  • SHA256

    f195f7b99504bb3d899974b42440844a50d0d2982ba3ae58f4f163c06cf8cb94

  • SHA512

    82d186b195b4f40464efd4299e5fe6e5732dd729d6c7f5b50b9c951bc8c1dd61f218cc8bbf36fd0047a0aef1cd74adac3c233f9e6ad419011839232c253eab3d

  • SSDEEP

    6144:8q13Gg7rjzkd1IvDZO/zzf4bEH/rRgWjTwa/RxJg:8E2Ijk+vlO/ftRDY

Score
10/10
redlinesectopratsewpalpadininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      bb2cd9052b7b7a67e468e9c3060e3811

    • Size

      307KB

    • MD5

      bb2cd9052b7b7a67e468e9c3060e3811

    • SHA1

      85eebf458f873751665c515c631cb9bc32beeb0d

    • SHA256

      f195f7b99504bb3d899974b42440844a50d0d2982ba3ae58f4f163c06cf8cb94

    • SHA512

      82d186b195b4f40464efd4299e5fe6e5732dd729d6c7f5b50b9c951bc8c1dd61f218cc8bbf36fd0047a0aef1cd74adac3c233f9e6ad419011839232c253eab3d

    • SSDEEP

      6144:8q13Gg7rjzkd1IvDZO/zzf4bEH/rRgWjTwa/RxJg:8E2Ijk+vlO/ftRDY

    Score
    10/10
    redlinesectopratsewpalpadininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks