General

  • Target

    8796a221328335cc0c97d7c5a73194f37b5259e5ee9479d72814fe9189267570.exe

  • Size

    95KB

  • Sample

    241024-b9awjaygjc

  • MD5

    26ab43d45d842d638fa8001df1c9fb6b

  • SHA1

    d71abe7b5180c4f2d31cd169ddf7fbf9e42fd410

  • SHA256

    8796a221328335cc0c97d7c5a73194f37b5259e5ee9479d72814fe9189267570

  • SHA512

    0635c5d0ffaacb705a28a85dd5058fa72a561efa7f266882bd8e55260330dc26110e7b59d5f93580d3f34357eed08af007f730e1366b7eceb0d7783cc90552af

  • SSDEEP

    1536:9HqsUEq76ElbG6jejoigIY43Ywzi0Zb78ivombfexv0ujXyyed2DtmulgS6pM:91p+68YY+zi0ZbYe1g0ujyzdLM

Malware Config

Extracted

Family

redline

Botnet

DataBase

C2

bestmetrys.zapto.org:1019

Targets

    • Target

      8796a221328335cc0c97d7c5a73194f37b5259e5ee9479d72814fe9189267570.exe

    • Size

      95KB

    • MD5

      26ab43d45d842d638fa8001df1c9fb6b

    • SHA1

      d71abe7b5180c4f2d31cd169ddf7fbf9e42fd410

    • SHA256

      8796a221328335cc0c97d7c5a73194f37b5259e5ee9479d72814fe9189267570

    • SHA512

      0635c5d0ffaacb705a28a85dd5058fa72a561efa7f266882bd8e55260330dc26110e7b59d5f93580d3f34357eed08af007f730e1366b7eceb0d7783cc90552af

    • SSDEEP

      1536:9HqsUEq76ElbG6jejoigIY43Ywzi0Zb78ivombfexv0ujXyyed2DtmulgS6pM:91p+68YY+zi0ZbYe1g0ujyzdLM

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

MITRE ATT&CK Enterprise v15

Tasks