Overview

overview

10

Static

static

3

de5db6c4f4...2e.exe

windows7-x64

10

de5db6c4f4...2e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de5db6c4f43175526bc82bab48124b2e

  • Size

    410KB

  • Sample

    240325-s6gncacb38

  • MD5

    de5db6c4f43175526bc82bab48124b2e

  • SHA1

    4a6abb2ba5478d9b29a49e36518c585aec8e87fd

  • SHA256

    93e2455a56c74a3f37f69fd8c918922fd5f32d1055f874f626bff8dc9203754e

  • SHA512

    b406983819f86e7cbc5f03cd9a964a30292750e58b6bc22a8e2a3751d0af88ba40ac7788bcabfabc2d885721d07aa6a9b00801c41dae920a4c00dbbb020ee938

  • SSDEEP

    12288:1iJo1KLSpH3orMbwTBzGZUxQBj9s8PqVze+O8Dt:X1K4orMbwTBzGZUxQBj9sT9

Score
10/10
redlinesectopratsewpalpadininfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      de5db6c4f43175526bc82bab48124b2e

    • Size

      410KB

    • MD5

      de5db6c4f43175526bc82bab48124b2e

    • SHA1

      4a6abb2ba5478d9b29a49e36518c585aec8e87fd

    • SHA256

      93e2455a56c74a3f37f69fd8c918922fd5f32d1055f874f626bff8dc9203754e

    • SHA512

      b406983819f86e7cbc5f03cd9a964a30292750e58b6bc22a8e2a3751d0af88ba40ac7788bcabfabc2d885721d07aa6a9b00801c41dae920a4c00dbbb020ee938

    • SSDEEP

      12288:1iJo1KLSpH3orMbwTBzGZUxQBj9s8PqVze+O8Dt:X1K4orMbwTBzGZUxQBj9sT9

    Score
    10/10
    redlinesectopratsewpalpadininfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks