Overview

overview

10

Static

static

3

d7f51cdf00...68.exe

windows7-x64

10

d7f51cdf00...68.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e4b7c9298414f720b6f8c802d6ef0334c738791db0826b74df397a93fbd263a8

  • Size

    284KB

  • Sample

    241110-tgvdkstkcn

  • MD5

    e18174d2cceb56fb232dd0ed73a02c63

  • SHA1

    5615c07c3d45e55864ebd33b7a6555401ad8cc7d

  • SHA256

    e4b7c9298414f720b6f8c802d6ef0334c738791db0826b74df397a93fbd263a8

  • SHA512

    a805656f420089b4741d9fe7be76e70fdcc29a51e92ec30c913e7a00d8207c17ba673a7a49a3cdaa6cb6a75bc812780cb0c093a687bc0bed53ec8d6924bf6f62

  • SSDEEP

    6144:VBJ8z0Z5uzisCI36NKcsgevbbiQJaC7B/GFEaxt741IgOjtWwDnG:p8z0ZIzifPUzvyFBxtU1ITAIG

Score
10/10
redlinesectopratdiscoveryinfostealerrattrojan

Malware Config

Targets

    • Target

      d7f51cdf002b164fc7e474406716af9ed13241b919e477ee1f91bd0475f96768.exe

    • Size

      385KB

    • MD5

      c15700a8fd1e72d4394b46734efb74e7

    • SHA1

      01ae9e386cb70db8ac56ad5aaf618662a64a4103

    • SHA256

      d7f51cdf002b164fc7e474406716af9ed13241b919e477ee1f91bd0475f96768

    • SHA512

      a254436154ef1be538445b999b8375d9406e36bcf4397c610abc40f6980460cd2999393a670a4cfdf5348048323f7991cf2ecab89d21497c20c0f71d9c6551b7

    • SSDEEP

      6144:TaJL/IL2XxKEP1Onj2rAPiVvi7p1GQGljPxkm0FhPC58xQ3xDPkMo5zXbAc:eJrjOCrLwpqPL58xaxDPyrbA

    Score
    10/10
    redlinesectopratdiscoveryinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    • Sectoprat family

      sectoprat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks