redline | 41db174a1dab0a3daf8076d64ea73d74abc2e3b66d6423d638677ac23877f5af | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

41db174a1d...af.exe

windows7-x64

41db174a1d...af.exe

windows10-2004-x64

Sharing

General

Target

41db174a1dab0a3daf8076d64ea73d74abc2e3b66d6423d638677ac23877f5af
Size

320KB
Sample

241111-ecjc7a1pb1
MD5

ed87943df543df9f17a1ca85550ff66f
SHA1

6fa40dbbc1175d701891b49d0f68268fd6549cb1
SHA256

41db174a1dab0a3daf8076d64ea73d74abc2e3b66d6423d638677ac23877f5af
SHA512

4e6b707c64e451573075ca4d0f0e9c87a1b71ed7facfd1df2961f19fad9d2ce104346178647bed0ebcf4d748a0fcf485d9dcc5ccccbd4240c3e63a760be87311
SSDEEP

6144:9m8LCq4I8ELnKH4rM1EI/2HW37zNOWz5JH0GVApdlP:fL+IZ0MM1E1WAdlP

Score

10^/10

redline sectoprat sewpalpadin discovery infostealer rat trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

41db174a1dab0a3daf8076d64ea73d74abc2e3b66d6423d638677ac23877f5af.exe

Resource

win7-20241023-en

redline sectoprat sewpalpadin discovery infostealer rat trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

41db174a1dab0a3daf8076d64ea73d74abc2e3b66d6423d638677ac23877f5af.exe

Resource

win10v2004-20241007-en

redline sectoprat sewpalpadin discovery infostealer rat trojan

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.29:18087

Targets

- Target
  
  41db174a1dab0a3daf8076d64ea73d74abc2e3b66d6423d638677ac23877f5af
- Size
  
  320KB
- MD5
  
  ed87943df543df9f17a1ca85550ff66f
- SHA1
  
  6fa40dbbc1175d701891b49d0f68268fd6549cb1
- SHA256
  
  41db174a1dab0a3daf8076d64ea73d74abc2e3b66d6423d638677ac23877f5af
- SHA512
  
  4e6b707c64e451573075ca4d0f0e9c87a1b71ed7facfd1df2961f19fad9d2ce104346178647bed0ebcf4d748a0fcf485d9dcc5ccccbd4240c3e63a760be87311
- SSDEEP
  
  6144:9m8LCq4I8ELnKH4rM1EI/2HW37zNOWz5JH0GVApdlP:fL+IZ0MM1E1WAdlP
Score

10^/10

redline sectoprat sewpalpadin discovery infostealer rat trojan
- RedLine
  RedLine Stealer is a malware family written in C#, first appearing in early 2020.
  infostealer redline
- RedLine payload
- Redline family
  redline
- SectopRAT
  SectopRAT is a remote access trojan first seen in November 2019.
  trojan rat sectoprat
- SectopRAT payload
- Sectoprat family
  sectoprat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

redlinesectopratsewpalpadindiscoveryinfostealerrattrojan

behavioral2

redlinesectopratsewpalpadindiscoveryinfostealerrattrojan

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.