Overview

overview

10

Static

static

1

Sorillus Rat V6.1.zip

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Sorillus Rat V6.1.zip

  • Size

    88.0MB

  • Sample

    241231-vgy77szlg1

  • MD5

    bd9d764b4e67c5c13fe879377fd272c0

  • SHA1

    9d0da2d83e754157b05fb51b64918dbacc1a1661

  • SHA256

    6fa0a4a2b99f3fd92c3e635cf1fa1595d8544b1177962f80bfe21e82fa8fe122

  • SHA512

    eaa3b718e7a12cb1c857e79f5a3dc47912220586384d476475c929111dedc4d8282d29dbc028e7f07cffcd30b07237fd05da15b4c018efedf96ecd2abd8ada5e

  • SSDEEP

    1572864:hqwKPP5vg7vUgNt8Hwy2p7RgtXZwkE0bAPcXNB2WhxusDuXznEvaW6DGmHvAdyPE:DKPRgZt7y2UXycOcXNgA/aznStsGU4W0

Score
10/10
adwindredlinediscoveryinfostealertrojan

Malware Config

Targets

    • Target

      Sorillus Rat V6.1.zip

    • Size

      88.0MB

    • MD5

      bd9d764b4e67c5c13fe879377fd272c0

    • SHA1

      9d0da2d83e754157b05fb51b64918dbacc1a1661

    • SHA256

      6fa0a4a2b99f3fd92c3e635cf1fa1595d8544b1177962f80bfe21e82fa8fe122

    • SHA512

      eaa3b718e7a12cb1c857e79f5a3dc47912220586384d476475c929111dedc4d8282d29dbc028e7f07cffcd30b07237fd05da15b4c018efedf96ecd2abd8ada5e

    • SSDEEP

      1572864:hqwKPP5vg7vUgNt8Hwy2p7RgtXZwkE0bAPcXNB2WhxusDuXznEvaW6DGmHvAdyPE:DKPRgZt7y2UXycOcXNgA/aznStsGU4W0

    Score
    10/10
    adwindredlinediscoveryinfostealertrojan

    • AdWind

      A Java-based RAT family operated as malware-as-a-service.

      trojanadwind

    • Adwind family

      adwind

    • Class file contains resources related to AdWind

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks