redline | c04899067944af20789c88c36bce803692dbd0ca6e73085f1d816ebcef9a7fe6

General

Target
c04899067944af20789c88c36bce803692dbd0ca6e73085f1d816ebcef9a7fe6.bin
Size 95KB
Sample260914-vtlsmsfn8x
SHA256 c04899067944af20789c88c36bce803692dbd0ca6e73085f1d816ebcef9a7fe6
MD5 e5598a4ac6b955fd2a4e0666ae9afa8a
SHA1 22e01a5159d2e5fe2573fb85cadc436e240f525a
SHA512 485d99789bc89c7091b6be6db66c738a1c258478e60d2074ef26202b5ddf43d8c3b761d7e7b2769f5cc6332fa6ec8ed9ec511a926305d39faef8fa9f6836ab7c
SSDEEP 1536:5qsCbqDylbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2H3tmulgS6p8l:XEwiYj+zi0ZbYe1g0ujyzdX8
TLSH
T1ECA35D3067AC9F19EAFD1B75B4B2012043F0E08A9091FB4A4DC154E71FA7B866957EF2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

185.222.57.151:55615

Targets

- Target
  c04899067944af20789c88c36bce803692dbd0ca6e73085f1d816ebcef9a7fe6.bin
- Size 95KB
- SHA256 c04899067944af20789c88c36bce803692dbd0ca6e73085f1d816ebcef9a7fe6
- MD5 e5598a4ac6b955fd2a4e0666ae9afa8a
- SHA1 22e01a5159d2e5fe2573fb85cadc436e240f525a
- SHA512 485d99789bc89c7091b6be6db66c738a1c258478e60d2074ef26202b5ddf43d8c3b761d7e7b2769f5cc6332fa6ec8ed9ec511a926305d39faef8fa9f6836ab7c
- SSDEEP 1536:5qsCbqDylbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2H3tmulgS6p8l:XEwiYj+zi0ZbYe1g0ujyzdX8
- TLSH
  T1ECA35D3067AC9F19EAFD1B75B4B2012043F0E08A9091FB4A4DC154E71FA7B866957EF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

cheat discovery redline sectoprat infostealer rat trojan
- Family: RedLine
  RedLine Stealer is a malware family written in C#, first appearing in early 2020.
  infostealer redline
- Family: SectopRAT
  SectopRAT is a remote access trojan first seen in November 2019.
  trojan rat sectoprat
- RedLine payload
- SectopRAT payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: RedLine

Family: SectopRAT

RedLine payload

SectopRAT payload

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2