Overview

overview

10

Static

static

3

d2472506bd...79.exe

windows7-x64

10

d2472506bd...79.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d2472506bdf1bb90e68f958100ffb679

  • Size

    408KB

  • Sample

    240318-cbdp7sed9x

  • MD5

    d2472506bdf1bb90e68f958100ffb679

  • SHA1

    5304310844e73e04b0936300c7684e9f2a4c8f94

  • SHA256

    1be692bc9b4af6f221d98ce41f96020a2d4fde1f7ae0a13d0943e418f2bf2f05

  • SHA512

    30640b4e602bd5282cc703ef5e38d8bf3c0606ead34a3dd96636347d32d4961243dbb44a512e9d3d5ea2b6ec9d4b63233c0e9432d59c59c3d8510a9482851ec0

  • SSDEEP

    12288:tgtnj06efZ+d8fGVTl4A4yXkddM8zACkY:gjde0x4py0/MAo

Score
10/10
redlinesectoprat202infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

202

C2

ynetellyan.xyz:80

Targets

    • Target

      d2472506bdf1bb90e68f958100ffb679

    • Size

      408KB

    • MD5

      d2472506bdf1bb90e68f958100ffb679

    • SHA1

      5304310844e73e04b0936300c7684e9f2a4c8f94

    • SHA256

      1be692bc9b4af6f221d98ce41f96020a2d4fde1f7ae0a13d0943e418f2bf2f05

    • SHA512

      30640b4e602bd5282cc703ef5e38d8bf3c0606ead34a3dd96636347d32d4961243dbb44a512e9d3d5ea2b6ec9d4b63233c0e9432d59c59c3d8510a9482851ec0

    • SSDEEP

      12288:tgtnj06efZ+d8fGVTl4A4yXkddM8zACkY:gjde0x4py0/MAo

    Score
    10/10
    redlinesectoprat202infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks