General

  • Target

    19c8d38b83b1a2a1aa447e079cf1a568

  • Size

    107KB

  • Sample

    231230-qk6n8sacd6

  • MD5

    19c8d38b83b1a2a1aa447e079cf1a568

  • SHA1

    92ab8858c24eaad97854ab8df53d3d4421534e5a

  • SHA256

    7a91968a19e7bb95904ce1927e31bc657f2ea6188f234ea18f510150b401baed

  • SHA512

    01e9b98fe4bd1b9e44e4f7e51a7005ba6f05693e019eeddf987d15a5fab827c730397f8d584ab6f3b048b7113c7bcc0de75aeda010d31d19a8eaf17fbdbdd535

  • SSDEEP

    1536:4t9pmqqxi+O2jbdOJ36RXMonN7HjbuqGdSnMTyq+dF+LdDjEaG6qTaoigR:uSxi+DjZy36RXVVGSnqyjdFwYXB

Malware Config

Extracted

Family

redline

Botnet

@wulsom

C2

45.132.104.217:12780

Targets

    • Target

      19c8d38b83b1a2a1aa447e079cf1a568

    • Size

      107KB

    • MD5

      19c8d38b83b1a2a1aa447e079cf1a568

    • SHA1

      92ab8858c24eaad97854ab8df53d3d4421534e5a

    • SHA256

      7a91968a19e7bb95904ce1927e31bc657f2ea6188f234ea18f510150b401baed

    • SHA512

      01e9b98fe4bd1b9e44e4f7e51a7005ba6f05693e019eeddf987d15a5fab827c730397f8d584ab6f3b048b7113c7bcc0de75aeda010d31d19a8eaf17fbdbdd535

    • SSDEEP

      1536:4t9pmqqxi+O2jbdOJ36RXMonN7HjbuqGdSnMTyq+dF+LdDjEaG6qTaoigR:uSxi+DjZy36RXVVGSnqyjdFwYXB

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

MITRE ATT&CK Matrix

Tasks