Overview

overview

10

Static

static

3

PekkaRat.zip

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PekkaRat.zip

  • Size

    136.8MB

  • Sample

    241221-qmphqszrbp

  • MD5

    59fd8dfdd2e25a4912714dbaed64537a

  • SHA1

    ad2576f91a3a1291401995c70329e8f75b3722cb

  • SHA256

    804f2dc5b0a6b15041c2ca16d1f42d4b179183545689c5a680c4307f290a53e5

  • SHA512

    0c63b9c46d9e017e08291e9d7e3da11682842a3e79c33538801cffc0cc28534e33c24b7c86bafa8b0ec9b8bb5fff9a12c2fd53a715775c12d7f57b95792cfde0

  • SSDEEP

    3145728:lniXhXDIFBgY35H1uAyL5km4NQ908t24WIFBgY35H1uAyxIU3Io8SkV:IIFBgYpH1WLLRmlIFBgYpH1WV8SkV

Score
10/10
redlinediscoveryinfostealer

Malware Config

Targets

    • Target

      PekkaRat.zip

    • Size

      136.8MB

    • MD5

      59fd8dfdd2e25a4912714dbaed64537a

    • SHA1

      ad2576f91a3a1291401995c70329e8f75b3722cb

    • SHA256

      804f2dc5b0a6b15041c2ca16d1f42d4b179183545689c5a680c4307f290a53e5

    • SHA512

      0c63b9c46d9e017e08291e9d7e3da11682842a3e79c33538801cffc0cc28534e33c24b7c86bafa8b0ec9b8bb5fff9a12c2fd53a715775c12d7f57b95792cfde0

    • SSDEEP

      3145728:lniXhXDIFBgY35H1uAyL5km4NQ908t24WIFBgY35H1uAyxIU3Io8SkV:IIFBgYpH1WLLRmlIFBgYpH1WV8SkV

    Score
    10/10
    redlinediscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks