Overview

overview

10

Static

static

3

c085f04494...f4.exe

windows7-x64

10

c085f04494...f4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c085f044947d49c84aabd4aa3602bdf4

  • Size

    337KB

  • Sample

    240311-ny5mzshf72

  • MD5

    c085f044947d49c84aabd4aa3602bdf4

  • SHA1

    be765b3452cca369848826cefa9d41ddabcdab6a

  • SHA256

    869d66bc12e637ac1050f8b2d5c48fefe370b551944cf47ba40e0ec382a673ff

  • SHA512

    61a6e45fbbe38ab42c05695d7d3c07e3cfcac3085eafbee90f04761d75d2c3a9d7ca9a1d3c760d70b0f9deeb24d956ae9ac45eae71cfa8183adf464a91921ad4

  • SSDEEP

    6144:bmCNITOQaQo9P7sX8fv0sowRncun3Zg6AfiwBPAnpQx5AH:bfOyDL94X8n0sow9cu3LhwBPAi

Score
10/10
redlinesectopratsewpalpadininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      c085f044947d49c84aabd4aa3602bdf4

    • Size

      337KB

    • MD5

      c085f044947d49c84aabd4aa3602bdf4

    • SHA1

      be765b3452cca369848826cefa9d41ddabcdab6a

    • SHA256

      869d66bc12e637ac1050f8b2d5c48fefe370b551944cf47ba40e0ec382a673ff

    • SHA512

      61a6e45fbbe38ab42c05695d7d3c07e3cfcac3085eafbee90f04761d75d2c3a9d7ca9a1d3c760d70b0f9deeb24d956ae9ac45eae71cfa8183adf464a91921ad4

    • SSDEEP

      6144:bmCNITOQaQo9P7sX8fv0sowRncun3Zg6AfiwBPAnpQx5AH:bfOyDL94X8n0sow9cu3LhwBPAi

    Score
    10/10
    redlinesectopratsewpalpadininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks