Overview

overview

10

Static

static

3

c9049692d9...61.exe

windows7-x64

10

c9049692d9...61.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c9049692d9843f4564c722beed7f3361

  • Size

    340KB

  • Sample

    240314-tcvtjsgc5t

  • MD5

    c9049692d9843f4564c722beed7f3361

  • SHA1

    d457c2fa83b44356a5648d0948cb78fdc8129622

  • SHA256

    4f95ff3d34492ddb8ca5afcc1c0940c1156bb713d9278678bfdd1c59963a3070

  • SHA512

    e281ec338957ccd28e5d00b210c3c1c3b7b0b300c50a26f1133fb586ed8b523ad663c73f963ead7e4df736e0d729684aa128e2bee99fe8ca3c0202042d864e05

  • SSDEEP

    6144:ov7bNdq8umpka1c7SyNBUkhiEKPtHAfYW5MsP+38dak7qF/tB:Ybrq8uoka1cMkQPtHAfF5XX7mt

Score
10/10
redlinesectopratsewpalpadininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      c9049692d9843f4564c722beed7f3361

    • Size

      340KB

    • MD5

      c9049692d9843f4564c722beed7f3361

    • SHA1

      d457c2fa83b44356a5648d0948cb78fdc8129622

    • SHA256

      4f95ff3d34492ddb8ca5afcc1c0940c1156bb713d9278678bfdd1c59963a3070

    • SHA512

      e281ec338957ccd28e5d00b210c3c1c3b7b0b300c50a26f1133fb586ed8b523ad663c73f963ead7e4df736e0d729684aa128e2bee99fe8ca3c0202042d864e05

    • SSDEEP

      6144:ov7bNdq8umpka1c7SyNBUkhiEKPtHAfYW5MsP+38dak7qF/tB:Ybrq8uoka1cMkQPtHAfF5XX7mt

    Score
    10/10
    redlinesectopratsewpalpadininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks