General

  • Target

    2224a4f60a4df8ce780731b754a36fd1

  • Size

    214KB

  • Sample

    231231-a3wzrahchj

  • MD5

    2224a4f60a4df8ce780731b754a36fd1

  • SHA1

    e7c9c5af5126fa8df187dd2de71e3376a80484d0

  • SHA256

    edf968a010b5502806431eaf28a32ed7cf76104497a5ca14612d5454b763182c

  • SHA512

    402ec61ef4596797dc6a0cd45a264e2c968e168103303d44dd8ef9da7385a6c08785a950499abc6cceea095dccb7887344ca61d94f0bdc35091ab63948cbfd46

  • SSDEEP

    3072:anHWspr++XEcqS1JOYfUH3Yvb6Olesp2L9rZWUOorL9yLjTS4PM:a2spr++XvmEi2bqsp2L9PZO

Malware Config

Targets

    • Target

      2224a4f60a4df8ce780731b754a36fd1

    • Size

      214KB

    • MD5

      2224a4f60a4df8ce780731b754a36fd1

    • SHA1

      e7c9c5af5126fa8df187dd2de71e3376a80484d0

    • SHA256

      edf968a010b5502806431eaf28a32ed7cf76104497a5ca14612d5454b763182c

    • SHA512

      402ec61ef4596797dc6a0cd45a264e2c968e168103303d44dd8ef9da7385a6c08785a950499abc6cceea095dccb7887344ca61d94f0bdc35091ab63948cbfd46

    • SSDEEP

      3072:anHWspr++XEcqS1JOYfUH3Yvb6Olesp2L9rZWUOorL9yLjTS4PM:a2spr++XvmEi2bqsp2L9PZO

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

MITRE ATT&CK Matrix

Tasks