Overview

overview

10

Static

static

3

c2044a5072...f4.exe

windows7-x64

10

c2044a5072...f4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c2044a50725312b44c871e0942a60cf4

  • Size

    389KB

  • Sample

    240312-a1ktpsah9s

  • MD5

    c2044a50725312b44c871e0942a60cf4

  • SHA1

    7b6338ed9afb9bf35333bc9f46ae8d469d1cf679

  • SHA256

    2b1af74bbbcbbe0cebfbf0d41911fe29c9a339f6f5b77a7bccc5eeabf2266b72

  • SHA512

    40dadd4fff1a0e9110b9dc099cdb38ecd37eb27c5333e34961ebb8dc5d75d342899773e8ae2075a60fb586ab9ef29dee61de7c531bcf1c8bc5b35d894efa32e5

  • SSDEEP

    6144:DjJwNxxvZV/mYlRg2vU6e9p2ghxcH1GMo93958XC5OAPLqNZ+V5O1EDQ5w:JwNHX/moqZ6e9pDc23cXC55Pfn6kQy

Score
10/10
redlinesectopratupdinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

UPD

C2

193.56.146.78:54955

Targets

    • Target

      c2044a50725312b44c871e0942a60cf4

    • Size

      389KB

    • MD5

      c2044a50725312b44c871e0942a60cf4

    • SHA1

      7b6338ed9afb9bf35333bc9f46ae8d469d1cf679

    • SHA256

      2b1af74bbbcbbe0cebfbf0d41911fe29c9a339f6f5b77a7bccc5eeabf2266b72

    • SHA512

      40dadd4fff1a0e9110b9dc099cdb38ecd37eb27c5333e34961ebb8dc5d75d342899773e8ae2075a60fb586ab9ef29dee61de7c531bcf1c8bc5b35d894efa32e5

    • SSDEEP

      6144:DjJwNxxvZV/mYlRg2vU6e9p2ghxcH1GMo93958XC5OAPLqNZ+V5O1EDQ5w:JwNHX/moqZ6e9pDc23cXC55Pfn6kQy

    Score
    10/10
    redlinesectopratupdinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks