Overview

overview

10

Static

static

3

d3d22f35f4...c4.exe

windows7-x64

3

d3d22f35f4...c4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d3d22f35f4571d498c8d6cb177cc260301652b9dd030ca431bd6bf2a4626f0c4

  • Size

    1.0MB

  • Sample

    241122-x1cjnawrcw

  • MD5

    7637c65d7d91f91e0507ed92ca67d011

  • SHA1

    7421f4ec388c0596be5df2cd07873b52fe94fe03

  • SHA256

    d3d22f35f4571d498c8d6cb177cc260301652b9dd030ca431bd6bf2a4626f0c4

  • SHA512

    aea8265502155302bfa9cec0820d9654d57c81b897507c225f6069e40e05025fb115139577ab7ed2dff9d13c19dbfd70063616aaa1231df496e3cc174def198b

  • SSDEEP

    24576:TUorxJdcT8IgUsBFJ/ZHOyNeM7DkdIM4Oiy:YorxJIsB//ZHOC7c

Score
10/10
redlinesectopratdiscoveryinfostealerrattrojan

Malware Config

Targets

    • Target

      d3d22f35f4571d498c8d6cb177cc260301652b9dd030ca431bd6bf2a4626f0c4

    • Size

      1.0MB

    • MD5

      7637c65d7d91f91e0507ed92ca67d011

    • SHA1

      7421f4ec388c0596be5df2cd07873b52fe94fe03

    • SHA256

      d3d22f35f4571d498c8d6cb177cc260301652b9dd030ca431bd6bf2a4626f0c4

    • SHA512

      aea8265502155302bfa9cec0820d9654d57c81b897507c225f6069e40e05025fb115139577ab7ed2dff9d13c19dbfd70063616aaa1231df496e3cc174def198b

    • SSDEEP

      24576:TUorxJdcT8IgUsBFJ/ZHOyNeM7DkdIM4Oiy:YorxJIsB//ZHOC7c

    Score
    10/10
    discoveryredlinesectopratinfostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    • Sectoprat family

      sectoprat

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks