Overview

overview

10

Static

static

3

bc1156c5a7...16.exe

windows7-x64

10

bc1156c5a7...16.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc1156c5a79d58208421c1c6f91dd416

  • Size

    394KB

  • Sample

    240309-r36mmaab68

  • MD5

    bc1156c5a79d58208421c1c6f91dd416

  • SHA1

    ce9bd4dd8381d08872481955b28e56623330f86b

  • SHA256

    65666b8099492aaf2a870a74aed2fb2185cfeab7de30166764383058fca1012b

  • SHA512

    26190c17ee7233ce8b42e725883cef791f8494643b0a31287ef20fdd703951400ccf2c63c33d11edcf0ac546153f648bc35b55b9af53820954dc650d020e2992

  • SSDEEP

    6144:U3Fpuy/ypTnok1MHsh//M99zuQ0jL8OurTh87Bro9NI/aMovvIc+:0uUypTR1MHshO9yQ0/JS987Br/SF

Score
10/10
redlinesectopratsewpalpadininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      bc1156c5a79d58208421c1c6f91dd416

    • Size

      394KB

    • MD5

      bc1156c5a79d58208421c1c6f91dd416

    • SHA1

      ce9bd4dd8381d08872481955b28e56623330f86b

    • SHA256

      65666b8099492aaf2a870a74aed2fb2185cfeab7de30166764383058fca1012b

    • SHA512

      26190c17ee7233ce8b42e725883cef791f8494643b0a31287ef20fdd703951400ccf2c63c33d11edcf0ac546153f648bc35b55b9af53820954dc650d020e2992

    • SSDEEP

      6144:U3Fpuy/ypTnok1MHsh//M99zuQ0jL8OurTh87Bro9NI/aMovvIc+:0uUypTR1MHshO9yQ0/JS987Br/SF

    Score
    10/10
    redlinesectopratsewpalpadininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks