Overview

overview

10

Static

static

3

a4b6686134...0N.exe

windows7-x64

10

a4b6686134...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a4b66861342752f67afade7086674e90N.exe

  • Size

    318KB

  • Sample

    240803-q27ymavdqn

  • MD5

    a4b66861342752f67afade7086674e90

  • SHA1

    b811102853619bc2116fb203c144c375ffa68800

  • SHA256

    9e7b86c82e51d5aef776a722e26e70b2b75f31ac1d1983f0fcd3d8758a0817e0

  • SHA512

    070a71f5355988d1d7e103b5d3617d1dd6946f0919397a4ea9a03692f3260241780c202c734ee8db325fe961dcb19e02de02ed1649da87f8fe57a584de554b2c

  • SSDEEP

    6144:vLchLYmv4hghQ430FWfkzoSaE73IVEYIM:D9mvKDM0FWGfr6E

Score
10/10
redlinesectopratsewpalpadindiscoveryinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      a4b66861342752f67afade7086674e90N.exe

    • Size

      318KB

    • MD5

      a4b66861342752f67afade7086674e90

    • SHA1

      b811102853619bc2116fb203c144c375ffa68800

    • SHA256

      9e7b86c82e51d5aef776a722e26e70b2b75f31ac1d1983f0fcd3d8758a0817e0

    • SHA512

      070a71f5355988d1d7e103b5d3617d1dd6946f0919397a4ea9a03692f3260241780c202c734ee8db325fe961dcb19e02de02ed1649da87f8fe57a584de554b2c

    • SSDEEP

      6144:vLchLYmv4hghQ430FWfkzoSaE73IVEYIM:D9mvKDM0FWGfr6E

    Score
    10/10
    redlinesectopratsewpalpadindiscoveryinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks