Overview

overview

10

Static

static

10

licencia cracked.exe

windows7-x64

1

licencia cracked.exe

windows10-1703-x64

7

licencia cracked.exe

windows10-2004-x64

7

licencia cracked.exe

windows11-21h2-x64

7

requerimie...va.exe

windows7-x64

10

requerimie...va.exe

windows10-1703-x64

10

requerimie...va.exe

windows10-2004-x64

10

requerimie...va.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fuck you, i want you back, .rar

  • Size

    19.7MB

  • Sample

    240318-xw5pmsgg4x

  • MD5

    54684451176311fd9d62b5e5acb31d27

  • SHA1

    91c7cdf346d8e0a76f485bf68f49c967c3975a80

  • SHA256

    4fa0275a5b6847891e92d541b69a438a5a40404ce4e8d3f7ec3eb6b128924e09

  • SHA512

    81f15b9bead32ad232e8af03e579ccb46ebf514998b8c61298ac17a3dc620755018f0636186a5ad004353a5a4bd2863a87d7c9e5c8fb3d99c09fe16595bb691b

  • SSDEEP

    393216:X/p0iA8ESk5XhuKfARSnsg4lcIJDrCEJLfUxY2/eXnT0kZK2gHBNUusEs:X4bSRKe4sgAcCDrCEJ7m2EBNnsEs

Score
10/10
redlinesectopratcheatinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

design-invited.at.ply.gg:23426

Targets

    • Target

      licencia cracked.exe

    • Size

      72.7MB

    • MD5

      947c3eafacadd7a3a67121b62d4ed2f5

    • SHA1

      38dd9d944c48bc36bd499a8773518654841529ba

    • SHA256

      0f33053fd5435aa78dc96e554456eff3d55971139d66ecc50fe545f4f7036c32

    • SHA512

      b3f627806600523b2f1f2d5638a0dc7941bfa41a0eaaaf358834d6d30a6f8ddaad65f55003f89a42ac0b0f7405c7164386e75a90a2792aeb0d18a5d2de640d4f

    • SSDEEP

      393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfx:fMguj8Q4VfvgqFTrYsaNJBsAV

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2behavioral3behavioral4

    • Target

      requerimientos java.EXE

    • Size

      95KB

    • MD5

      5a5346678e26c7e1870d66705bc9bbb8

    • SHA1

      caac1c81e8d33761edfba8712402e7ba9b223c95

    • SHA256

      3feae453d474140f7de8fd150226f3a892083c74d5cfa760cae6bb4751375683

    • SHA512

      cb3635edb95190b678a977ad3e11e5d99eb5605b2d935b48be88638750d328801a5c728a0d41ee760a5bd807ff88dda5560ecb5d4f6dc839712ac64ce948e176

    • SSDEEP

      1536:Vqsm5qeUlbG6jejoigI843Ywzi0Zb78ivombfexv0ujXyyed2b3tmulgS6pA:TKlMY8+zi0ZbYe1g0ujyzdDA

    Score
    10/10
    redlinesectopratcheatinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral5behavioral6behavioral7behavioral8

MITRE ATT&CK Matrix

Tasks