Overview

overview

10

Static

static

3

c9d2e5e1e7...0f.exe

windows7-x64

10

c9d2e5e1e7...0f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c9d2e5e1e78d720dfed11aab56f1440f

  • Size

    341KB

  • Sample

    240314-2r1x4shf31

  • MD5

    c9d2e5e1e78d720dfed11aab56f1440f

  • SHA1

    83ab2088cb4281a1ae3addfd744f65cfa5f6218a

  • SHA256

    ac26d6d6249fd9cdd86c8b5d0e7e76a3d2e76adee04f2e8a94a90937d5052ed0

  • SHA512

    d891812f2da8f0831db7306bdcba071a9a608a00720466e70bdccb076599466a446a136546e170c5e8983d55da744095b38a782ad7dab66cb9f99fe9a52a3aa4

  • SSDEEP

    6144:uLjLN4EOkfu8pAAzLFEYt1SaTuU6fhgCWTGNGGBWSFrog:WLN1OkHpZFEYtgaD6ZTW60IWk

Score
10/10
redlinesectoprattestinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

test

C2

193.56.146.78:51487

Targets

    • Target

      c9d2e5e1e78d720dfed11aab56f1440f

    • Size

      341KB

    • MD5

      c9d2e5e1e78d720dfed11aab56f1440f

    • SHA1

      83ab2088cb4281a1ae3addfd744f65cfa5f6218a

    • SHA256

      ac26d6d6249fd9cdd86c8b5d0e7e76a3d2e76adee04f2e8a94a90937d5052ed0

    • SHA512

      d891812f2da8f0831db7306bdcba071a9a608a00720466e70bdccb076599466a446a136546e170c5e8983d55da744095b38a782ad7dab66cb9f99fe9a52a3aa4

    • SSDEEP

      6144:uLjLN4EOkfu8pAAzLFEYt1SaTuU6fhgCWTGNGGBWSFrog:WLN1OkHpZFEYtgaD6ZTW60IWk

    Score
    10/10
    redlinesectoprattestinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks