Overview

overview

10

Static

static

3

LisectAVT_...83.exe

windows7-x64

10

LisectAVT_...83.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    LisectAVT_2403002C_83.exe

  • Size

    224KB

  • Sample

    240725-b9yycsthqg

  • MD5

    2944075641b664bf5018b161271a5ae9

  • SHA1

    c17afffe9b8bf32fee6303be1d6e36136f3f96bb

  • SHA256

    8f6aca0f53b40eeae16a5abacf2a7c0b83b3bb91ad8cae655b983bc6d35434f3

  • SHA512

    549d82e4ee20883224ab7f45165b21edc4136dd91ac58a62c1e536cee7443fa557f3ed35b60d25582153ab609d83a801eed6f413d738dcf71b889ba8afc87d77

  • SSDEEP

    3072:P45XkJFv17pqZ0kmFqxn7uaFyCOZy0HJAcKZmd91pScwuk5GppH/z:P4gvRzIxnZSZVpAT0pS6p

Score
10/10
redlinesectopratpubdiscoveryinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      LisectAVT_2403002C_83.exe

    • Size

      224KB

    • MD5

      2944075641b664bf5018b161271a5ae9

    • SHA1

      c17afffe9b8bf32fee6303be1d6e36136f3f96bb

    • SHA256

      8f6aca0f53b40eeae16a5abacf2a7c0b83b3bb91ad8cae655b983bc6d35434f3

    • SHA512

      549d82e4ee20883224ab7f45165b21edc4136dd91ac58a62c1e536cee7443fa557f3ed35b60d25582153ab609d83a801eed6f413d738dcf71b889ba8afc87d77

    • SSDEEP

      3072:P45XkJFv17pqZ0kmFqxn7uaFyCOZy0HJAcKZmd91pScwuk5GppH/z:P4gvRzIxnZSZVpAT0pS6p

    Score
    10/10
    redlinesectopratpubdiscoveryinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks