Overview

overview

10

Static

static

3

3370e84692...ff.exe

windows7-x64

10

3370e84692...ff.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3370e84692c4cc07d0a64cc4415bae2888682e27a4b5f53be516013e72ae13ff

  • Size

    474KB

  • Sample

    240424-r4qb2abg52

  • MD5

    6695d71ce227e6762a4059811ea9f369

  • SHA1

    3642bbe7fc4fff442f0be15c3c8f412cf12f4428

  • SHA256

    3370e84692c4cc07d0a64cc4415bae2888682e27a4b5f53be516013e72ae13ff

  • SHA512

    5cf3f7ac8ca1052443e3ebfe40e0ed9999277ca0d205444f944e61eec57220252e9fb1432227403ff71ef2fc2020da320ca84cca9c55c102aeee8a0f7e02beb0

  • SSDEEP

    6144:xiESzl1QpPyTqW1JvsI45ExO+GFm+JbTQJiWIzDRHwjoI/RHEQj9TKO8RZ:xoZapIqKxsIw+OzNtQjoI5HZTKO8v

Score
10/10
redlinezgratinfostealerrat

Malware Config

Targets

    • Target

      3370e84692c4cc07d0a64cc4415bae2888682e27a4b5f53be516013e72ae13ff

    • Size

      474KB

    • MD5

      6695d71ce227e6762a4059811ea9f369

    • SHA1

      3642bbe7fc4fff442f0be15c3c8f412cf12f4428

    • SHA256

      3370e84692c4cc07d0a64cc4415bae2888682e27a4b5f53be516013e72ae13ff

    • SHA512

      5cf3f7ac8ca1052443e3ebfe40e0ed9999277ca0d205444f944e61eec57220252e9fb1432227403ff71ef2fc2020da320ca84cca9c55c102aeee8a0f7e02beb0

    • SSDEEP

      6144:xiESzl1QpPyTqW1JvsI45ExO+GFm+JbTQJiWIzDRHwjoI/RHEQj9TKO8RZ:xoZapIqKxsIw+OzNtQjoI5HZTKO8v

    Score
    10/10
    redlinezgratinfostealerrat

    • Detect ZGRat V1

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Detects executables packed with ConfuserEx Mod

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks