General

  • Target

    5997c6a297d6d55d31cac482718284d8

  • Size

    98KB

  • Sample

    240113-2jzp3sfccm

  • MD5

    5997c6a297d6d55d31cac482718284d8

  • SHA1

    6ebc5a0c1ce3e970d4791e9d2011830e6e0c4f08

  • SHA256

    c8d485195b8e0cb9ee16d45d6d62c8f1fc3d2a73b18024c6ccd112a41dfa447e

  • SHA512

    056e265a0b4d7e629b58f82fcb474fb2e4bbf568960ef8e690d50640846c8e775e6365599e74d108b28dc210275b5a30ce7e45577699db45d55905e5b3440540

  • SSDEEP

    1536:i3LNmocO6spDb2FYvvj4dPxJFUOAmbfexvOuvUyyedH93wYqCxXsEuG6ijoigk:ixmocIGYWJ+ONgOucyzd2Snn

Malware Config

Extracted

Family

redline

Botnet

@kryystall

C2

185.250.206.82:21330

Targets

    • Target

      5997c6a297d6d55d31cac482718284d8

    • Size

      98KB

    • MD5

      5997c6a297d6d55d31cac482718284d8

    • SHA1

      6ebc5a0c1ce3e970d4791e9d2011830e6e0c4f08

    • SHA256

      c8d485195b8e0cb9ee16d45d6d62c8f1fc3d2a73b18024c6ccd112a41dfa447e

    • SHA512

      056e265a0b4d7e629b58f82fcb474fb2e4bbf568960ef8e690d50640846c8e775e6365599e74d108b28dc210275b5a30ce7e45577699db45d55905e5b3440540

    • SSDEEP

      1536:i3LNmocO6spDb2FYvvj4dPxJFUOAmbfexvOuvUyyedH93wYqCxXsEuG6ijoigk:ixmocIGYWJ+ONgOucyzd2Snn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

MITRE ATT&CK Matrix

Tasks