General

  • Target

    c743466b1d2c8e3cb422e7d704d56929

  • Size

    248KB

  • Sample

    240314-a5h6nsed5v

  • MD5

    c743466b1d2c8e3cb422e7d704d56929

  • SHA1

    b484bc4897d58159eaa3432cf81ef863f5bd5301

  • SHA256

    08719b0193b33919bd4042999fe9eb41236495659923c577b2164445b43732e0

  • SHA512

    ba7cafef1072f2c10f087386f52d1ac93d6d04099e49d867f8da24378ea1d6db375fbbe0df79091bab533e537676f3dcca9aa9d44a445eafbb453dede2828d1c

  • SSDEEP

    3072:blsj7KJ5W3JKL8PKCW5A30g8DjajuE3h7tNAAY6+DURQyQm2s2sCIzgFnLm6:OAW3JKLcEU0g8DeFbAApgJvJsCKgFnL

Malware Config

Extracted

Family

redline

C2

185.215.113.29:8889

Targets

    • Target

      c743466b1d2c8e3cb422e7d704d56929

    • Size

      248KB

    • MD5

      c743466b1d2c8e3cb422e7d704d56929

    • SHA1

      b484bc4897d58159eaa3432cf81ef863f5bd5301

    • SHA256

      08719b0193b33919bd4042999fe9eb41236495659923c577b2164445b43732e0

    • SHA512

      ba7cafef1072f2c10f087386f52d1ac93d6d04099e49d867f8da24378ea1d6db375fbbe0df79091bab533e537676f3dcca9aa9d44a445eafbb453dede2828d1c

    • SSDEEP

      3072:blsj7KJ5W3JKL8PKCW5A30g8DjajuE3h7tNAAY6+DURQyQm2s2sCIzgFnLm6:OAW3JKLcEU0g8DeFbAApgJvJsCKgFnL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

MITRE ATT&CK Matrix

Tasks