Overview

overview

10

Static

static

10

8042e30a34...6f.exe

windows7-x64

10

8042e30a34...6f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8042e30a34f07a606d6e8f3768f59d52133820a41794275481e3506b1e2d006f.exe

  • Size

    95KB

  • Sample

    240713-m3xx9szeqg

  • MD5

    0e4b0dd3ee5d91b69296e3887bde2d2d

  • SHA1

    a040a44b9bb38de4b7399ae8856557e818aa68db

  • SHA256

    8042e30a34f07a606d6e8f3768f59d52133820a41794275481e3506b1e2d006f

  • SHA512

    499b22959ca1e170b2d45878e85b0c6265af390b297176503ab7cebf4b06d7137f98a3fc029be21d402d8e6959d98f90cbb36a77c42140ac91bfc592248c7266

  • SSDEEP

    1536:5qsIbqDylbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2JtmulgS6p8l:XywiYj+zi0ZbYe1g0ujyzdp8

Score
10/10
redlinesectopratfrenchinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

french

C2

91.92.243.245:47477

Targets

    • Target

      8042e30a34f07a606d6e8f3768f59d52133820a41794275481e3506b1e2d006f.exe

    • Size

      95KB

    • MD5

      0e4b0dd3ee5d91b69296e3887bde2d2d

    • SHA1

      a040a44b9bb38de4b7399ae8856557e818aa68db

    • SHA256

      8042e30a34f07a606d6e8f3768f59d52133820a41794275481e3506b1e2d006f

    • SHA512

      499b22959ca1e170b2d45878e85b0c6265af390b297176503ab7cebf4b06d7137f98a3fc029be21d402d8e6959d98f90cbb36a77c42140ac91bfc592248c7266

    • SSDEEP

      1536:5qsIbqDylbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2JtmulgS6p8l:XywiYj+zi0ZbYe1g0ujyzdp8

    Score
    10/10
    redlinesectopratfrenchinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks