Overview

overview

10

Static

static

3

d6fc713c70...f1.exe

windows7-x64

10

d6fc713c70...f1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d6fc713c7096e5c2416faceffd20f1f1

  • Size

    386KB

  • Sample

    240319-ynvp5sdh46

  • MD5

    d6fc713c7096e5c2416faceffd20f1f1

  • SHA1

    b9f3d3f584495f34608917136f51b5c2a92e1396

  • SHA256

    7daf391afc04850fde597f94255d1acf63091655ad1661b590d0c79bf4827142

  • SHA512

    2630dee87a816c0980ee971baea20e73d1eef6b0ed00786ce8e1f1871f0079141e5de8075652b964fc9bdb905774c8f6d10ead1ba6450224f2e9cf9f3e42ed18

  • SSDEEP

    6144:3VavyWCS4kr0NuoI8G0MqEIfbcrWBUNpTQJ05xaq6R5RFESQ2:g9CS/oNuoITqRcWmnM+5wNRlQ2

Score
10/10
redlinesectopratsewpalpadininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      d6fc713c7096e5c2416faceffd20f1f1

    • Size

      386KB

    • MD5

      d6fc713c7096e5c2416faceffd20f1f1

    • SHA1

      b9f3d3f584495f34608917136f51b5c2a92e1396

    • SHA256

      7daf391afc04850fde597f94255d1acf63091655ad1661b590d0c79bf4827142

    • SHA512

      2630dee87a816c0980ee971baea20e73d1eef6b0ed00786ce8e1f1871f0079141e5de8075652b964fc9bdb905774c8f6d10ead1ba6450224f2e9cf9f3e42ed18

    • SSDEEP

      6144:3VavyWCS4kr0NuoI8G0MqEIfbcrWBUNpTQJ05xaq6R5RFESQ2:g9CS/oNuoITqRcWmnM+5wNRlQ2

    Score
    10/10
    redlinesectopratsewpalpadininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks