General

  • Target

    5665f108965c55a2d3ebcbbb50b03786

  • Size

    107KB

  • Sample

    240112-n33n7afdbn

  • MD5

    5665f108965c55a2d3ebcbbb50b03786

  • SHA1

    5f3500c5d5f646383e06033fb0650d9b83da98a8

  • SHA256

    a32770d46ee2ee5b91cc36e5159868ec3ff7f847e7516d7bcb952f7a94e347a2

  • SHA512

    cb6e052712ace47f371efdc93309ecc3bc7e85d897dc64e85c8fac3e436a3a714ffd140d465daf87a3f911f89bfbf4db90fe1bd7f579f5d108de51ace342b0fb

  • SSDEEP

    1536:Ot9pmCexBLOcBGdOjH5IzTUvpgnOnJPljbuqGdCnZuyq+dpV+dDjEuG6qTaoigl:8exBL1BKoHCzTQpYS3GCnAyjdpGYD1

Malware Config

Extracted

Family

redline

Botnet

Kasl

C2

51.254.68.139:15009

Targets

    • Target

      5665f108965c55a2d3ebcbbb50b03786

    • Size

      107KB

    • MD5

      5665f108965c55a2d3ebcbbb50b03786

    • SHA1

      5f3500c5d5f646383e06033fb0650d9b83da98a8

    • SHA256

      a32770d46ee2ee5b91cc36e5159868ec3ff7f847e7516d7bcb952f7a94e347a2

    • SHA512

      cb6e052712ace47f371efdc93309ecc3bc7e85d897dc64e85c8fac3e436a3a714ffd140d465daf87a3f911f89bfbf4db90fe1bd7f579f5d108de51ace342b0fb

    • SSDEEP

      1536:Ot9pmCexBLOcBGdOjH5IzTUvpgnOnJPljbuqGdCnZuyq+dpV+dDjEuG6qTaoigl:8exBL1BKoHCzTQpYS3GCnAyjdpGYD1

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

MITRE ATT&CK Matrix

Tasks