redline | 829cb13654c9fd806cc709a93e8a4de447caa14c8b7590285ca2855c63be05a9 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

829cb13654...a9.exe

windows7-x64

829cb13654...a9.exe

windows10-2004-x64

Sharing

General

Target

829cb13654c9fd806cc709a93e8a4de447caa14c8b7590285ca2855c63be05a9
Size

358KB
Sample

241111-dns64avmcp
MD5

68ef1e9ad038923934928b4f97b9ca59
SHA1

8e0070c8f230cf9d812f08b632556dfbec33dbb2
SHA256

829cb13654c9fd806cc709a93e8a4de447caa14c8b7590285ca2855c63be05a9
SHA512

5a34bf61f8927bedeaf3c1e35c4b55f4172d0fd306731fd0cb60f3d3ba41a5c5cdd440abfdcc47b8b27a4c72f356c960b63669a209fbc5a92f45e933fdaab201
SSDEEP

6144:4KDAAcQEbU3G7O/hCT2/NzJbSMdeq+0TVr+:4KDAAcQEb77OphJJbjMjmr

Score

10^/10

redline sectoprat udp discovery infostealer rat trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

829cb13654c9fd806cc709a93e8a4de447caa14c8b7590285ca2855c63be05a9.exe

Resource

win7-20240708-en

redline sectoprat udp discovery infostealer rat trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

829cb13654c9fd806cc709a93e8a4de447caa14c8b7590285ca2855c63be05a9.exe

Resource

win10v2004-20241007-en

redline sectoprat udp discovery infostealer rat trojan

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Extracted

Family

redline

Botnet

UDP

C2

45.9.20.20:13441

Targets

- Target
  
  829cb13654c9fd806cc709a93e8a4de447caa14c8b7590285ca2855c63be05a9
- Size
  
  358KB
- MD5
  
  68ef1e9ad038923934928b4f97b9ca59
- SHA1
  
  8e0070c8f230cf9d812f08b632556dfbec33dbb2
- SHA256
  
  829cb13654c9fd806cc709a93e8a4de447caa14c8b7590285ca2855c63be05a9
- SHA512
  
  5a34bf61f8927bedeaf3c1e35c4b55f4172d0fd306731fd0cb60f3d3ba41a5c5cdd440abfdcc47b8b27a4c72f356c960b63669a209fbc5a92f45e933fdaab201
- SSDEEP
  
  6144:4KDAAcQEbU3G7O/hCT2/NzJbSMdeq+0TVr+:4KDAAcQEb77OphJJbjMjmr
Score

10^/10

redline sectoprat udp discovery infostealer rat trojan
- RedLine
  RedLine Stealer is a malware family written in C#, first appearing in early 2020.
  infostealer redline
- RedLine payload
- Redline family
  redline
- SectopRAT
  SectopRAT is a remote access trojan first seen in November 2019.
  trojan rat sectoprat
- SectopRAT payload
- Sectoprat family
  sectoprat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

redlinesectopratudpdiscoveryinfostealerrattrojan

behavioral2

redlinesectopratudpdiscoveryinfostealerrattrojan

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.