Overview

overview

10

Static

static

3

fe6ec55eb3...ce.exe

windows7-x64

10

fe6ec55eb3...ce.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a7617156b0ae94b415c784cabd0e6170340c28669216c7732f27f1adfed5d07

  • Size

    468KB

  • Sample

    240902-bbxmmsxamn

  • MD5

    e8888675fb2c222b84c622420c9a7dc8

  • SHA1

    574dcb2a644e8e78985222459f73b6002f6f0f17

  • SHA256

    6a7617156b0ae94b415c784cabd0e6170340c28669216c7732f27f1adfed5d07

  • SHA512

    465fa346dd4b1789c4ab0b94210835ee7c3b28b81679e575192cdeb6b78bc427448ab4e7c536b0c14f4be1021f3108057870d78d730eec35769d4d33cae857c3

  • SSDEEP

    12288:ukbJAiBAusI4ysWdWUMHAe9T1zgHwv+D26MUUxSiQ3z0vK/:IiB9Sy4UOnMQv+6tUMSigz0vK/

Score
10/10
redlinesectoprat@perfectworldzdiscoveryinfostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

@perfectworldz

C2

95.181.152.5:46927

Attributes
  • auth_value

    cdf3919a262c0d6ba99116b375d7551c

Targets

    • Target

      fe6ec55eb383a61725615537de96e54f118f50a34148acab96032ed92ebcf2ce

    • Size

      802KB

    • MD5

      e510f4dd446b1be9cb2ac89f9a40efb5

    • SHA1

      b0d0b2c09f68bcbeea55c4bb578ed73cd01b4a28

    • SHA256

      fe6ec55eb383a61725615537de96e54f118f50a34148acab96032ed92ebcf2ce

    • SHA512

      11d5da1a83f636ea32e2e7afc7710c44f6d120b654833519197a925b6a37cc290721326a9e1d1527871e880939512f6852df3a9334a5df00c4505abeb912e3e6

    • SSDEEP

      12288:jlfH1UiwPYTaL73CTPpBtWiTN6VJcUEPaBO9bLd6zBj4Qt4NZO6/LMOPVHfSQ:hf1aPYTbTtvqEP2OmZGHOOAKHfSQ

    Score
    10/10
    redlinesectoprat@perfectworldzdiscoveryinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks