Overview

overview

10

Static

static

3

d2d0a869b9...4d.exe

windows7-x64

10

d2d0a869b9...4d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d2d0a869b987d505331f0ff8898fb44d

  • Size

    345KB

  • Sample

    240318-g9f1fabb41

  • MD5

    d2d0a869b987d505331f0ff8898fb44d

  • SHA1

    d16bb10c9e60d9b60db1deb306e5886a26fdd19c

  • SHA256

    cde87145152af1afa8cebfe625536b32686ad4a280e27271c1eb3d985d410747

  • SHA512

    4cfd97a6266a6c2166df2430419ea94afc43941eb104e27b1ae80725819461a4afefed0e2d9a29f77c47e7ddd5211e71a4ce7b20ae04215033a44330ed581532

  • SSDEEP

    6144:wN8RjNgxgHmHAHhWt9YwdI2NRd3UecI+I/EyC48Vu97kxCE:JjixgHmHAHhWt02rhcPIsyCRVQk

Score
10/10
redlinesectopratsewpalpadininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      d2d0a869b987d505331f0ff8898fb44d

    • Size

      345KB

    • MD5

      d2d0a869b987d505331f0ff8898fb44d

    • SHA1

      d16bb10c9e60d9b60db1deb306e5886a26fdd19c

    • SHA256

      cde87145152af1afa8cebfe625536b32686ad4a280e27271c1eb3d985d410747

    • SHA512

      4cfd97a6266a6c2166df2430419ea94afc43941eb104e27b1ae80725819461a4afefed0e2d9a29f77c47e7ddd5211e71a4ce7b20ae04215033a44330ed581532

    • SSDEEP

      6144:wN8RjNgxgHmHAHhWt9YwdI2NRd3UecI+I/EyC48Vu97kxCE:JjixgHmHAHhWt02rhcPIsyCRVQk

    Score
    10/10
    redlinesectopratsewpalpadininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks