General

  • Target

    018fdf6628c4e053dfad14b6561f906e

  • Size

    264KB

  • Sample

    231229-x28y9addf3

  • MD5

    018fdf6628c4e053dfad14b6561f906e

  • SHA1

    77f24de6a174d09f581f68a8be78388703aed773

  • SHA256

    c783603717e4e900812cefc1676313b5511cd1904cded011effbacc7a95cda74

  • SHA512

    74efe62c672f444f7ed21de50a52ff83048c28f0eff416b102ff46ba16b62d52c86782936f56e04a4c0327e1a45ec57dffe3b6d78ce7811625f235786b58318f

  • SSDEEP

    3072:DXAqq3AytXKiTWsNoW1UYiTq/s8kEtq9UMX/kc6TT2teABNirRUOaETJKT0yB3N:DHI8iT1YpZErMvWTCeovr

Malware Config

Extracted

Family

redline

C2

185.215.113.29:8889

Targets

    • Target

      018fdf6628c4e053dfad14b6561f906e

    • Size

      264KB

    • MD5

      018fdf6628c4e053dfad14b6561f906e

    • SHA1

      77f24de6a174d09f581f68a8be78388703aed773

    • SHA256

      c783603717e4e900812cefc1676313b5511cd1904cded011effbacc7a95cda74

    • SHA512

      74efe62c672f444f7ed21de50a52ff83048c28f0eff416b102ff46ba16b62d52c86782936f56e04a4c0327e1a45ec57dffe3b6d78ce7811625f235786b58318f

    • SSDEEP

      3072:DXAqq3AytXKiTWsNoW1UYiTq/s8kEtq9UMX/kc6TT2teABNirRUOaETJKT0yB3N:DHI8iT1YpZErMvWTCeovr

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

MITRE ATT&CK Matrix

Tasks