Overview

overview

10

Static

static

10

build.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    build.exe

  • Size

    95KB

  • Sample

    240615-vmwz2ayalc

  • MD5

    0628c0105fc4b0b7411a41d2bf3413cb

  • SHA1

    16a87eff67e49872dd9b7399ded40babf5506f77

  • SHA256

    4c8c2abfd0489840ca585950a4f1cbc67f53ec6de0eafb8f5797c79fadfd128d

  • SHA512

    0a9a784c8d7087bc725740601acebeb3c989aa73bc876516c86ac1cc50b8b43c4c11d3f03bd499578eb0fb336a02e9748d943f3cbb1b40ced3354902219e91b7

  • SSDEEP

    1536:VqsQ5qeUlbG6jejoigI843Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6pA:TglMY8+zi0ZbYe1g0ujyzdGA

Score
10/10
redlinesectoprat@123infostealerrattrojan

Malware Config

Extracted

Family

redline

Botnet

@123

C2

vehicle-vary.gl.at.ply.gg:23828

Targets

    • Target

      build.exe

    • Size

      95KB

    • MD5

      0628c0105fc4b0b7411a41d2bf3413cb

    • SHA1

      16a87eff67e49872dd9b7399ded40babf5506f77

    • SHA256

      4c8c2abfd0489840ca585950a4f1cbc67f53ec6de0eafb8f5797c79fadfd128d

    • SHA512

      0a9a784c8d7087bc725740601acebeb3c989aa73bc876516c86ac1cc50b8b43c4c11d3f03bd499578eb0fb336a02e9748d943f3cbb1b40ced3354902219e91b7

    • SSDEEP

      1536:VqsQ5qeUlbG6jejoigI843Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6pA:TglMY8+zi0ZbYe1g0ujyzdGA

    Score
    10/10
    redlinesectoprat@123infostealerrattrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    behavioral1

MITRE ATT&CK Matrix

Tasks