General

  • Target

    563c3f03357c7c749c433be2b9dcec84

  • Size

    203KB

  • Sample

    240112-mr2gbafbb5

  • MD5

    563c3f03357c7c749c433be2b9dcec84

  • SHA1

    5c6c45cff2100eb02bbddee0c41bdd7e9b17e918

  • SHA256

    c020bf0540efd75b7690ec6f8903f6811e13037c5261c954626d6250880a2e69

  • SHA512

    25c06ca2a641ac1aa67f0fbe3ec35b66582624db952ded6882f8171e5d404358cf7ce87df7fee834b06c2c2de5cf8a759980abfb5bc16c13f457806258e9d0d6

  • SSDEEP

    1536:wdCVOAhdczP53DzoFLxs7a5w51FsWPEoBlsKitwadSysfN5ctoacbWyeX8ZUVDoR:wFAhO7JzoFL95IzJz5lsiZ096

Malware Config

Targets

    • Target

      563c3f03357c7c749c433be2b9dcec84

    • Size

      203KB

    • MD5

      563c3f03357c7c749c433be2b9dcec84

    • SHA1

      5c6c45cff2100eb02bbddee0c41bdd7e9b17e918

    • SHA256

      c020bf0540efd75b7690ec6f8903f6811e13037c5261c954626d6250880a2e69

    • SHA512

      25c06ca2a641ac1aa67f0fbe3ec35b66582624db952ded6882f8171e5d404358cf7ce87df7fee834b06c2c2de5cf8a759980abfb5bc16c13f457806258e9d0d6

    • SSDEEP

      1536:wdCVOAhdczP53DzoFLxs7a5w51FsWPEoBlsKitwadSysfN5ctoacbWyeX8ZUVDoR:wFAhO7JzoFL95IzJz5lsiZ096

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

MITRE ATT&CK Matrix

Tasks