Overview

overview

10

Static

static

3

d942045191...d4.exe

windows7-x64

10

d942045191...d4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d942045191cdaf3e8f261328b171bad4

  • Size

    338KB

  • Sample

    240320-tws43adf2y

  • MD5

    d942045191cdaf3e8f261328b171bad4

  • SHA1

    8925cd50b203aa962aaecc73d0e36b5b19efa438

  • SHA256

    a92847d744c35125dc6383d12adf888d9f778fec522e696b7baeff6e29a7e566

  • SHA512

    58421f1867c7e791659a2ff2fd2745b1208f30efc0072c461ae3c76e0fb81e2fdbf2bf31c1b0dee878a2245c4236b82f0b9f977b895e06e3e9fd26f847117e74

  • SSDEEP

    6144:O8L69QLfQQszM/zbVrtSaTlzF+wENXjDauBsj9DDPWBfO:O8G9SILI/XvSaTFF+wIXjDkjpz0f

Score
10/10
redlinesectoprattestinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

test

C2

193.56.146.78:51487

Targets

    • Target

      d942045191cdaf3e8f261328b171bad4

    • Size

      338KB

    • MD5

      d942045191cdaf3e8f261328b171bad4

    • SHA1

      8925cd50b203aa962aaecc73d0e36b5b19efa438

    • SHA256

      a92847d744c35125dc6383d12adf888d9f778fec522e696b7baeff6e29a7e566

    • SHA512

      58421f1867c7e791659a2ff2fd2745b1208f30efc0072c461ae3c76e0fb81e2fdbf2bf31c1b0dee878a2245c4236b82f0b9f977b895e06e3e9fd26f847117e74

    • SSDEEP

      6144:O8L69QLfQQszM/zbVrtSaTlzF+wENXjDauBsj9DDPWBfO:O8G9SILI/XvSaTFF+wIXjDkjpz0f

    Score
    10/10
    redlinesectoprattestinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks