General

  • Target

    443c3579dfce14ae7dd93e0599a51632

  • Size

    336KB

  • Sample

    240105-xz4azshahk

  • MD5

    443c3579dfce14ae7dd93e0599a51632

  • SHA1

    0b3727d9f2b85048dd147739030fedae68cf6d4b

  • SHA256

    54ca8d74aa00440ab48cdd9cc288ec58baf171694b8061d06fe63b8c0c37b0dc

  • SHA512

    16078f63dd667a5a0296ca901a3a1ae18d820224612bdbe3b2dd832b7d471a0892c982857b0ecd321d4858c52fb2715cb2ba8b96943d91ae5160ce753bbf266e

  • SSDEEP

    6144:MRLn+k7GYcWTUK/bsjsAsFYFipZvqDauBsj9aMd+83kEWCfO:MR7+5YcwrFYkpZvqDkjAMMmkEnf

Malware Config

Extracted

Family

redline

Botnet

test

C2

193.56.146.78:51487

Targets

    • Target

      443c3579dfce14ae7dd93e0599a51632

    • Size

      336KB

    • MD5

      443c3579dfce14ae7dd93e0599a51632

    • SHA1

      0b3727d9f2b85048dd147739030fedae68cf6d4b

    • SHA256

      54ca8d74aa00440ab48cdd9cc288ec58baf171694b8061d06fe63b8c0c37b0dc

    • SHA512

      16078f63dd667a5a0296ca901a3a1ae18d820224612bdbe3b2dd832b7d471a0892c982857b0ecd321d4858c52fb2715cb2ba8b96943d91ae5160ce753bbf266e

    • SSDEEP

      6144:MRLn+k7GYcWTUK/bsjsAsFYFipZvqDauBsj9aMd+83kEWCfO:MR7+5YcwrFYkpZvqDkjAMMmkEnf

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

MITRE ATT&CK Matrix

Tasks