redline | 4c10cd4fcea45e620c6791f5f6a1192d4f3cb173feaa6062d3c4bd7837d33519

General

Target
4c10cd4fcea45e620c6791f5f6a1192d4f3cb173feaa6062d3c4bd7837d33519.bin
Size 95KB
Sample260910-xz16mavcqd
SHA256 4c10cd4fcea45e620c6791f5f6a1192d4f3cb173feaa6062d3c4bd7837d33519
MD5 95548ed278847bb9757f135fa51cbd00
SHA1 a2de9b0b26f15e477b72799e498fc0874facd457
SHA512 eb2a1c881fe0ff9b68d34f060a6045fe68073fe53b315c9db0152a794e5b72be44db2ecb9be140ce28e779d015a118a71d78f19eea285bc0416e3957be141eb8
SSDEEP 1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2M3teulgS6pY:rAMOY3+zi0ZbYe1g0ujyzdiY
TLSH
T1EEA35D20679C9F19EAFD1B74B4B2012043F0E08A9091FB4B4DC1A4E71FA7B865957EF2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

211.ip.ply.gg:31174

Targets

- Target
  4c10cd4fcea45e620c6791f5f6a1192d4f3cb173feaa6062d3c4bd7837d33519.bin
- Size 95KB
- SHA256 4c10cd4fcea45e620c6791f5f6a1192d4f3cb173feaa6062d3c4bd7837d33519
- MD5 95548ed278847bb9757f135fa51cbd00
- SHA1 a2de9b0b26f15e477b72799e498fc0874facd457
- SHA512 eb2a1c881fe0ff9b68d34f060a6045fe68073fe53b315c9db0152a794e5b72be44db2ecb9be140ce28e779d015a118a71d78f19eea285bc0416e3957be141eb8
- SSDEEP 1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2M3teulgS6pY:rAMOY3+zi0ZbYe1g0ujyzdiY
- TLSH
  T1EEA35D20679C9F19EAFD1B74B4B2012043F0E08A9091FB4B4DC1A4E71FA7B865957EF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

cheat discovery redline sectoprat infostealer rat trojan
- Family: RedLine
  RedLine Stealer is a malware family written in C#, first appearing in early 2020.
  infostealer redline
- Family: SectopRAT
  SectopRAT is a remote access trojan first seen in November 2019.
  trojan rat sectoprat
- RedLine payload
- SectopRAT payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: RedLine

Family: SectopRAT

RedLine payload

SectopRAT payload

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2