General

  • Target

    fa9101aab80dd0d6ac3fbfb2ef8d0592

  • Size

    315KB

  • Sample

    231222-vjwvvsbafr

  • MD5

    fa9101aab80dd0d6ac3fbfb2ef8d0592

  • SHA1

    f6b0a37e051f21f8ef8b037176f20983b6e8117a

  • SHA256

    e2cd80a3c0d37c2d417b9c564ea138fd53506073bc35ac9113482aa3bdd84c50

  • SHA512

    0eb86877f184df3fffa6c6acf149b3e19fc84fac1cf47055a0d03e531349afde53214e393fe3f6ace938612a62c51f2971fd3108be2d4219cbfc4de3a270599b

  • SSDEEP

    6144:hUpXqkLTMP1YJ+YH/Hqlo3/OHU6gX9L7THlQz7yq:mpXZ3MP1Yos6o3Xd7THlSZ

Malware Config

Extracted

Family

redline

Botnet

test

C2

193.56.146.78:51487

Targets

    • Target

      fa9101aab80dd0d6ac3fbfb2ef8d0592

    • Size

      315KB

    • MD5

      fa9101aab80dd0d6ac3fbfb2ef8d0592

    • SHA1

      f6b0a37e051f21f8ef8b037176f20983b6e8117a

    • SHA256

      e2cd80a3c0d37c2d417b9c564ea138fd53506073bc35ac9113482aa3bdd84c50

    • SHA512

      0eb86877f184df3fffa6c6acf149b3e19fc84fac1cf47055a0d03e531349afde53214e393fe3f6ace938612a62c51f2971fd3108be2d4219cbfc4de3a270599b

    • SSDEEP

      6144:hUpXqkLTMP1YJ+YH/Hqlo3/OHU6gX9L7THlQz7yq:mpXZ3MP1Yos6o3Xd7THlSZ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

MITRE ATT&CK Matrix

Tasks